CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-07-22
Microsoft Windows SAM Database Overly Permissive ACL Local Privilege Escalation (SeriousSAM / HiveNightmare - CVE-2021-36934)
[Affected Scope] Windows 10 version 1809 and later, and Windows Server 2019 and later
[Impact] Local users can read sensitive registry hives (SAM, SYSTEM, SECURITY) via Volume Shadow Copies, leading to full SYSTEM privilege escalation and credential theft
[Mitigation] Apply the official security update, then manually delete all existing Volume Shadow Copies (VSS) and create new ones to fully mitigate the risk