A AegiFlow
UNKNOWNKNOWN EXPLOITED

CVE-2021-36934

Microsoft Windows SAM Local Privilege Escalation Vulnerability

Published
2022-02-10
Modified
2026-07-31
Sources
cisa-kev

Summary

If a Volume Shadow Copy (VSS) shadow copy of the system drive is available, users can read the SAM file which would allow any user to escalate privileges to SYSTEM level.

References

Includes data from the CISA Known Exploited Vulnerabilities catalog.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.