What is the CVSS score of CVE-2021-36942?

CVE-2021-36942 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 66.0%.

Is there a public PoC exploit available for CVE-2021-36942?

Yes, a public proof-of-concept exploit is available for CVE-2021-36942. Prioritise patching immediately. EPSS: 66.0%.

Is there a patch available for CVE-2021-36942?

Yes, a patch is available for CVE-2021-36942. Update the affected software to the latest version immediately.

Windows Server 2004 CVE-2021-36942

HIGH

2021-08-12 secure@microsoft.com

Microsoft Information Disclosure Windows Server 2004 Windows Server 2008 Windows Server 2012 Windows Server 2016 Windows Server 2019 Windows Server 20H2

7.5

CVSS 3.1 · Vendor: microsoft

Severity by source

Vendor (microsoft) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from Vendor (microsoft) · only source for this CVE.

CVSS VectorVendor: microsoft

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Added to CISA KEV

Jul 14, 2026 - 04:22 CISA

CVE Published

Aug 12, 2021 - 18:15 cve.org

HIGH 7.5

DescriptionCVE.org

Windows LSA Spoofing Vulnerability

AnalysisAI

Windows LSA Spoofing Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Technical ContextAI

Affected products include: Microsoft Windows Server 2004, Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016, Microsoft Windows Server 2019.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Windows Server 2004

View all

CVE-2021-40444 HIGH Act Now POC

8.8 Sep 15

Windows MSHTML component contains a remote code execution vulnerability that allows attackers to craft malicious ActiveX

CVE-2021-1732 HIGH Act Now POC

7.8 Feb 25

Windows Win32k contains an out-of-bounds write vulnerability enabling local privilege escalation to SYSTEM, exploited by

CVE-2021-1675 HIGH Act Now POC

7.8 Jun 08

Windows Print Spooler Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no auth

CVE-2021-42278 HIGH Act Now POC

7.5 Nov 10

Active Directory Domain Services Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.5), this vulnerabilit

CVE-2021-36948 HIGH Act Now

7.8 Aug 12

Windows Update Medic Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is

CVE-2021-34484 HIGH Act Now

7.8 Aug 12

Windows User Profile Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is

CVE-2021-41379 MEDIUM Act Now

5.5 Nov 10

Windows Installer Elevation of Privilege Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low atta

CVE-2021-34486 HIGH Act Now

7.8 Aug 12

Windows Event Tracing Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low at

CVE-2021-33771 HIGH Act Now

7.8 Jul 14

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack co

CVE-2021-36955 HIGH Act Now

7.8 Sep 15

Windows Common Log File System Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnera

CVE-2021-43226 HIGH Act Now

7.8 Dec 15

Windows Common Log File System Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnera

CVE-2021-31979 HIGH Act Now

7.8 Jul 14

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack co

Same technique Information Disclosure

View all

CVE-2019-2725 CRITICAL POC

9.8

CVE-2021-34523 CRITICAL POC

9.0

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2021-36942 vulnerability details – vuln.today

Back

Windows Server 2004 CVE-2021-36942

Severity by source

CVSS VectorVendor: microsoft

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

More in Windows Server 2004

Same technique Information Disclosure

Share

External POC / Exploit Code