CVE-2021-36948: Windows Update Medic Service Elevation of Privilege Vulnerability
Published Aug 12, 2021
·Updated
Microsoft Windows Update Medic Service contains an unspecified vulnerability that allows for privilege escalation.
Other sources
Windows Update Medic Service Elevation of Privilege Vulnerability
— NVD
Affected Software
17 affected components
Microsoft Windows 10 1809<10.0.17763.2114
Microsoft Windows 10 1909<10.0.18363.1734
Microsoft Windows 10 2004<10.0.19041.1165
Microsoft Windows 10 20h2<10.0.19042.1165
Microsoft Windows 10 21h1<10.0.19043.1165
Microsoft Windows Server 2004<10.0.19041.1165
Microsoft Windows Server 2019<10.0.17763.2114
Microsoft Windows Server 20h2<10.0.19042.1165
Microsoft Windows 10=20h2
Microsoft Windows 10=21h1
Microsoft Windows 10=1809
Microsoft Windows 10=1909
Microsoft Windows 10=2004
Microsoft Windows Server 2016=20h2
Microsoft Windows Server 2016=2004
Microsoft Windows Server 2019
Microsoft Windows
Event History
Aug 12, 2021
CVE Published
via MITRE·06:12 PM
Data Sourced
via MITRE·06:12 PM
DescriptionSeverity
Data Sourced
via NVD·06:15 PM
RemedyDescriptionSeverityAffected Software
Nov 3, 2021
Known Exploited
via CISA·12:00 AM
Frequently Asked Questions
1
What is the severity of CVE-2021-36948?
CVE-2021-36948 has a critical severity level due to its potential for privilege escalation.
2
How do I fix CVE-2021-36948?
To fix CVE-2021-36948, you should apply the latest security updates provided by Microsoft for affected Windows versions.
3
Which Windows versions are affected by CVE-2021-36948?
CVE-2021-36948 affects various versions of Windows 10 and Windows Server 2016 and 2019.
4
Can CVE-2021-36948 be exploited remotely?
CVE-2021-36948 requires local access to the system for exploitation, but it poses a significant risk if successful.
5
What are the potential impacts of CVE-2021-36948?
If exploited, CVE-2021-36948 could allow an attacker to gain higher privileges on a vulnerable system.