CVE-2021-36942
Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability
CVSS
7.5
High
EPSS
66.0%
p99
KEV
YES
Nov 3, 2021
Exploit Today
80
0-100
Published: Aug 12, 2021 · Last modified: Aug 10, 2026
Product
Microsoft / Windows
Vulnerability
Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability
Added to KEV
Nov 3, 2021
Remediate by
Nov 17, 2021
Known ransomware use
Yes
Summary description
Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability allowing an unauthenticated attacker to call a method on the LSARPC interface and coerce the domain controller to authenticate against another server using NTLM.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2021-36942
Windows LSA Spoofing Vulnerability
- msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36942
- portal.msrc.microsoft.comhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36942
- www.kb.cert.orghttps://www.kb.cert.org/vuls/id/405600
- www.cisa.govhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-36942