CVE-2021-36942

HighCVSS 7.5/10Known exploited (CISA KEV)Last modified Aug 10, 2026

Description

Windows LSA Spoofing Vulnerability

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Aug 12, 2021
Last modified
Aug 10, 2026
Added to CISA KEV
Nov 3, 2021
NVD status
Analyzed

Related CVEs from 2021

CVE-2021-369434.0Azure CycleCloud Elevation of Privilege VulnerabilityCVE-2021-369457.3Windows 10 Update Assistant Elevation of Privilege VulnerabilityCVE-2021-369465.4Microsoft Dynamics Business Central Cross-site Scripting VulnerabilityCVE-2021-369478.8Windows Print Spooler Remote Code Execution VulnerabilityCVE-2021-369487.8Windows Update Medic Service Elevation of Privilege VulnerabilityCVE-2021-369497.1Microsoft Azure Active Directory Connect Authentication Bypass VulnerabilityCVE-2021-36954.5A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heaCVE-2021-369505.4Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityCVE-2021-369527.8Visual Studio Remote Code Execution VulnerabilityCVE-2021-369537.5Windows TCP/IP Denial of Service VulnerabilityCVE-2021-369548.8Windows Bind Filter Driver Elevation of Privilege VulnerabilityCVE-2021-369557.8Windows Common Log File System Driver Elevation of Privilege Vulnerability