CVE-2021-36948: Windows Update Medic Service Elevation of Privilege Vulnerability
Published Aug 10, 2021
·Updated
Microsoft Windows Update Medic Service contains an unspecified vulnerability that allows for privilege escalation.
Other sources
Windows Update Medic Service Elevation of Privilege Vulnerability
— NVD
Affected Software
36 affected componentsFixes available
Microsoft Windows 10=20h2
Microsoft Windows 10=21h1
Microsoft Windows 10=1809
Microsoft Windows 10=1909
Microsoft Windows 10=2004
Microsoft Windows Server 2016=20h2
Microsoft Windows Server 2016=2004
Microsoft Windows Server 2019
Microsoft Windows
Microsoft Windows 10 1809<10.0.17763.2114
Microsoft Windows 10 1909<10.0.18363.1734
Microsoft Windows 10 2004<10.0.19041.1165
Microsoft Windows 10 20h2<10.0.19042.1165
Microsoft Windows 10 21h1<10.0.19043.1165
Microsoft Windows Server 2004<10.0.19041.1165
Microsoft Windows Server 2019<10.0.17763.2114
Microsoft Windows Server 20h2<10.0.19042.1165
Microsoft Windows 10=20H2
10.0.19042.1165
Microsoft Windows 10=1909
10.0.18363.1734
Microsoft Windows 10=2004
10.0.19041.1165
Microsoft Windows 10=20H2
10.0.19042.1165
Microsoft Windows Server=2004
10.0.19041.1165
Microsoft Windows 10=21H1
10.0.19043.1165
Microsoft Windows 10=21H1
10.0.19043.1165
Microsoft Windows 10=2004
10.0.19041.1165
Microsoft Windows Server=20H2
10.0.19042.1165
Microsoft Windows 10=2004
10.0.19041.1165
Microsoft Windows 10=21H1
10.0.19043.1165
Microsoft Windows 10=1909
10.0.18363.1734
Microsoft Windows 10=1809
10.0.17763.2114
Microsoft Windows Server 2019<10.0.17763.2114
10.0.17763.2114
Microsoft Windows 10=1809
10.0.17763.2114
Microsoft Windows 10=1909
10.0.18363.1734
Microsoft Windows 10=1809
10.0.17763.2114
Microsoft Windows 10=20H2
10.0.19042.1165
Microsoft Windows Server 2019<10.0.17763.2114
10.0.17763.2114
Remediation
Event History
Aug 10, 2021
CVE Published
via Microsoft·07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeaknessAffected Software
Known Exploited
via Microsoft·02:00 PM
Updated
via Microsoft·02:00 PM
SeverityAffected Software
Updated
via Microsoft·02:00 PM
DescriptionSeverity
Aug 12, 2021
CVE Published
via MITRE·06:12 PM
Data Sourced
via MITRE·06:12 PM
DescriptionSeverity
Data Sourced
via NVD·06:15 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-36948?
CVE-2021-36948 has a critical severity level due to its potential for privilege escalation.
2
How do I fix CVE-2021-36948?
To fix CVE-2021-36948, you should apply the latest security updates provided by Microsoft for affected Windows versions.
3
Which Windows versions are affected by CVE-2021-36948?
CVE-2021-36948 affects various versions of Windows 10 and Windows Server 2016 and 2019.
4
Can CVE-2021-36948 be exploited remotely?
CVE-2021-36948 requires local access to the system for exploitation, but it poses a significant risk if successful.
5
What are the potential impacts of CVE-2021-36948?
If exploited, CVE-2021-36948 could allow an attacker to gain higher privileges on a vulnerable system.