CVE-2021-36934

Vulnerability details

If a Volume Shadow Copy (VSS) shadow copy of the system drive is available, users can read the SAM file which would allow any user to escalate privileges to SYSTEM level.

Added to CISA KEV: 2022-02-10

Ransomware campaign use: Unknown

CISA due date: 2022-02-24

Defensive guidance from CISA

Apply updates per vendor instructions.

This is the source's required-action field, not an independently validated patch procedure. Refer to the vendor for exact affected versions and fixes.