← CVE Radar
CVE-2021-36948Windows Update Medic Service Elevation of Privilege Vulnerability
Windows Update Medic Service Elevation of Privilege Vulnerability
7.8 HIGHEPSS 23.27%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 7.8 | HIGH | 3.1microsoft (CNA) | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| 7.8 | HIGH | 3.1microsoft (CNA) | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C |
| 4.6 | MEDIUM | 2.0NVD | AV:L/AC:L/Au:N/C:P/I:P/A:P |
CISA required action
⚡ Known exploited · remediation due Nov 17, 2021
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2021-36948
- Status
- Analyzed
- Assigner (CNA)
- microsoft
- Published
- Aug 12, 2021
- Last modified
- 2026-08-10 20:19 UTC
Affected Products
As published by the CNA in the CVE record.
MicrosoftWindows 10 Version 18091 version range
- 10.0.17763.0 before 10.0.17763.2114
MicrosoftWindows 10 Version 18091 version range
- 10.0.0 before 10.0.17763.2114
MicrosoftWindows 10 Version 19091 version range
- 10.0.0 before 10.0.18363.1734
MicrosoftWindows 10 Version 20041 version range
- 10.0.0 before 10.0.19041.1165
MicrosoftWindows 10 Version 20H21 version range
- 10.0.0 before 10.0.19042.1165
MicrosoftWindows 10 Version 21H11 version range
- 10.0.0 before 10.0.19043.1165
MicrosoftWindows Server 20191 version range
- 10.0.17763.0 before 10.0.17763.2114
MicrosoftWindows Server 2019 (Server Core installation)1 version range
- 10.0.17763.0 before 10.0.17763.2114
MicrosoftWindows Server version 20041 version range
- 10.0.0 before 10.0.19041.1165
MicrosoftWindows Server version 20H21 version range
- 10.0.0 before 10.0.19042.1165