CVE-2021-36927

HighCVSS 7.8/10Last modified Aug 10, 2026

Description

Windows Digital TV Tuner device registration application Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

VendorProductVersions
MicrosoftWindows 7>= 6.1.0, < 6.1.7601.25898
MicrosoftWindows 7 Service Pack 1>= 6.1.0, < 6.1.7601.25898
MicrosoftWindows 8.1>= 6.3.0, < 6.3.9600.20303
MicrosoftWindows Server 2008 R2 Service Pack 1>= 6.1.7601.0, < 6.1.7601.25898
MicrosoftWindows Server 2008 R2 Service Pack 1 (Server Core installation)>= 6.1.7601.0, < 6.1.7601.25898
MicrosoftWindows Server 2008 Service Pack 2>= 6.0.6003.0, < 6.0.6003.21416
MicrosoftWindows Server 2008 Service Pack 2 (Server Core installation)>= 6.0.6003.0, < 6.0.6003.21416
MicrosoftWindows Server 2012>= 6.2.9200.0, < 6.2.9200.23645
MicrosoftWindows Server 2012 (Server Core installation)>= 6.2.9200.0, < 6.2.9200.23645
MicrosoftWindows Server 2012 R2>= 6.3.9600.0, < 6.3.9600.20303
MicrosoftWindows Server 2012 R2 (Server Core installation)>= 6.3.9600.0, < 6.3.9600.20303

References

Timeline

Published
Aug 12, 2021
Last modified
Aug 10, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-369286.0Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCVE-2021-369296.3Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityCVE-2021-36939.6LedgerSMB does not check the origin of HTML fragments merged into the browser's DOM. By sending a specially crafted URL to an authenticated CVE-2021-369305.3Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCVE-2021-369314.4Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCVE-2021-369327.5Windows Services for NFS ONCRPC XDR Driver Information Disclosure VulnerabilityCVE-2021-369337.5Windows Services for NFS ONCRPC XDR Driver Information Disclosure VulnerabilityCVE-2021-369347.8An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including CVE-2021-369368.8Windows Print Spooler Remote Code Execution VulnerabilityCVE-2021-369377.8Windows Media MPEG-4 Video Decoder Remote Code Execution VulnerabilityCVE-2021-369385.5Windows Cryptographic Primitives Library Information Disclosure VulnerabilityCVE-2021-36949.6LedgerSMB does not sufficiently HTML-encode error messages sent to the browser. By sending a specially crafted URL to an authenticated user,
CVE-2021-36927: High severity, CVSS 7.8 | Vulnix