CVE-2021-36955

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Aug 10, 2026

Description

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Sep 15, 2021
Last modified
Aug 10, 2026
Added to CISA KEV
Nov 3, 2021
NVD status
Analyzed

Related CVEs from 2021

CVE-2021-369564.4Azure Sphere Information Disclosure VulnerabilityCVE-2021-369577.8Windows Desktop Bridge Elevation of Privilege VulnerabilityCVE-2021-369587.8A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacCVE-2021-369595.5Windows Authenticode Spoofing VulnerabilityCVE-2021-36964.5A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap CVE-2021-369607.5Windows SMB Information Disclosure VulnerabilityCVE-2021-369615.5Windows Installer Denial of Service VulnerabilityCVE-2021-369625.5Windows Installer Information Disclosure VulnerabilityCVE-2021-369637.8Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVE-2021-369647.8Windows Event Tracing Elevation of Privilege VulnerabilityCVE-2021-369658.8Windows WLAN AutoConfig Service Remote Code Execution VulnerabilityCVE-2021-369667.8Windows Subsystem for Linux Elevation of Privilege Vulnerability
CVE-2021-36955: High severity, CVSS 7.8 | Vulnix