CVE-2021-36942
Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability
CVSS
7.5
Alto
EPSS
66.0%
p99
KEV
SÍ
3 nov 2021
Exploit Today
80
0-100
Publicado: 12 ago 2021 · Última mod.: 10 ago 2026
Producto
Microsoft / Windows
Vulnerabilidad
Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability
Añadido a KEV
3 nov 2021
Remediar antes de
17 nov 2021
Uso conocido en ransomware
Sí
Descripción resumida
Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability allowing an unauthenticated attacker to call a method on the LSARPC interface and coerce the domain controller to authenticate against another server using NTLM.
Acción requerida
Apply updates per vendor instructions.
Notas
https://nvd.nist.gov/vuln/detail/CVE-2021-36942
Windows LSA Spoofing Vulnerability
- msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36942
- portal.msrc.microsoft.comhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36942
- www.kb.cert.orghttps://www.kb.cert.org/vuls/id/405600
- www.cisa.govhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-36942