CVE Watch10 de ago. de 2026

CVE-2021-36948

Microsoft Windows Update Medic Service Privilege Escalation Vulnerability

CVSS

7.8

Alta

EPSS

23.3%

p98

KEV

SIM

3 de nov. de 2021

Exploit Today

0-100

Publicado: 12 de ago. de 2021 · Última mod.: 10 de ago. de 2026

EPSS · 30d

23.3%EPSS · 30 dias23.3%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Microsoft / Windows

Vulnerabilidade

Microsoft Windows Update Medic Service Privilege Escalation Vulnerability

Adicionado ao KEV

3 de nov. de 2021

Corrigir até

17 de nov. de 2021

Uso conhecido em ransomware

Não

Descrição resumida

Microsoft Windows Update Medic Service contains an unspecified vulnerability that allows for privilege escalation.

Ação necessária

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2021-36948

Descrição técnica

Windows Update Medic Service Elevation of Privilege Vulnerability

Referências oficiais

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-969518.8 ALT

95.6%

KEV—79Microsoft Windows Command Injection Vulnerability7d CVE-2026-858807.8 ALT

33.0%

KEV—60Microsoft Windows Heap-Based Buffer Overflow Vulnerability42d CVE-2026-819637.8 ALT

33.7%

KEV—60Microsoft Windows Link Following Vulnerability58d CVE-2026-322024.3 MÉD

99.4%

KEV—80Microsoft Windows Protection Mechanism Failure Vulnerability10d CVE-2026-208055.5 MÉD

94.5%

KEV—78Microsoft Windows Information Disclosure Vulnerability98d CVE-2025-622217.8 ALT

84.8%

KEV—75Microsoft Windows Use After Free Vulnerability41d