CVE-2021-36948

EUVD-2021-23524
Windows Update Medic Service Elevation of Privilege Vulnerability
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
microsoftCNA
7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 76%
Affected Products (NVD)
VendorProductVersion
microsoftwindows_10_1809
𝑥
< 10.0.17763.2114
microsoftwindows_10_1909
𝑥
< 10.0.18363.1734
microsoftwindows_10_2004
𝑥
< 10.0.19041.1165
microsoftwindows_10_20h2
𝑥
< 10.0.19042.1165
microsoftwindows_10_21h1
𝑥
< 10.0.19043.1165
microsoftwindows_server_2004
𝑥
< 10.0.19041.1165
microsoftwindows_server_2019
𝑥
< 10.0.17763.2114
microsoftwindows_server_20h2
𝑥
< 10.0.19042.1165
𝑥
= Vulnerable software versions
Windows Releases
Platform
Version
Windows 10
1809 (arm64, x64, x86)
KB5005030
1909 (arm64, x64, x86)
KB5005031
2004 (arm64, x64, x86)
KB5005033
20H2 (arm64, x64, x86)
KB5005033
21H1 (arm64, x64, x86)
KB5005033
Windows Server
2004 Server Core
KB5005033
20H2 Server Core
KB5005033
Windows Server 2019
Server Core
KB5005030
Standard
KB5005030
References
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36948
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36948
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-36948