CVE-2021-36942
Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability
CVSS
7.5
Alta
EPSS
66.0%
p99
KEV
SIM
3 de nov. de 2021
Exploit Today
80
0-100
Publicado: 12 de ago. de 2021 · Última mod.: 10 de ago. de 2026
Produto
Microsoft / Windows
Vulnerabilidade
Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability
Adicionado ao KEV
3 de nov. de 2021
Corrigir até
17 de nov. de 2021
Uso conhecido em ransomware
Sim
Descrição resumida
Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability allowing an unauthenticated attacker to call a method on the LSARPC interface and coerce the domain controller to authenticate against another server using NTLM.
Ação necessária
Apply updates per vendor instructions.
Notas
https://nvd.nist.gov/vuln/detail/CVE-2021-36942
Windows LSA Spoofing Vulnerability
- msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36942
- portal.msrc.microsoft.comhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36942
- www.kb.cert.orghttps://www.kb.cert.org/vuls/id/405600
- www.cisa.govhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-36942