Microsoft Windows SAM Local Privilege Escalation Vulnerability

An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) database. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. An attacker must have the ability to execute code on a victim system to exploit this vulnerability. After installing this security update, you must manually delete all shadow copies of system files, including the SAM database, to fully mitigate this vulnerabilty. Simply installing this security update will not fully mitigate this vulnerability. See KB5005357- Delete Volume Shadow Copies.

On 20 July 2021 Microsoft published an out-of-band Security Advisory to address a vulnerability in the following product: Exploitation of this vulnerability could allow an actor with the ability to execute code on a victim system to obtain sensitive system information and elevate privileges.

The Cyber Security Agency of Singapore included this CVE in its official Security Bulletin 28 Jul 2021, published on 28 July 2021. Open the linked bulletin for the product, severity and reference information published in that issue.

Une vulnérabilité a été découverte dans Microsoft Windows. Elle permet à un attaquant de provoquer une élévation de privilèges.

Une vulnérabilité a été découverte dans Microsoft Windows. Elle permet à un attaquant de provoquer une élévation de privilèges.

Windows 10 の複数のバージョンにおいて、%windir%\system32\config フォルダに対する読出し・実行（RX）権限が非管理者アカウントの BUILTIN\Users グループに付与されています。そのため、非特権ユーザによって、Security Accounts Manager (SAM) データベースを含む複数のシステムファイルが読み出されることで、結果として不十分な ACL を設定していることに起因する権限昇格の脆弱性が存在します。 また、バックアップ実行などの理由で生成された VSS シャドーコピーにも同様の脆弱性が存在します。

soft Dynamics 365(온-프레미스) 교차-사이트 스크립팅 취약성 Microsoft Dynamics CVE-2021-36946 Microsoft Dynamics Business Central 교차-사이트 스크립팅 취약성 Microsoft Dynamics CVE-2021-34524 Microsoft Dynamics 365(온-프레미스) 원격 코드 실행 취약성 Microsoft Graphics Component CVE-2021-34533 Windows 그래픽 구성 요소 글꼴 구문 분석 원격 코드 실행 취약성 Microsoft Graphics Component CVE-2021-34530 Windows 그래픽 구성 요소 원격 코드 실행 취약성 Microsoft Office CVE-2021-34478 Microsoft Office 원격 코드 실행 취약성 Microsoft Office SharePoint CVE-2021-36940 Microsoft SharePoint Server 스푸핑 취약성 Microsoft Office Word CVE-2021-36941 Microsoft Word 원격 코드 실행 취약성 Microsoft Scripting Engine CVE-2021-34480 스크립팅 엔진 메모리 손상 취약성 Microsoft Windows CVE-2021-36934 Windows 권한 상승 취약성 Microsoft Windows Codecs Library CVE-2021-36937 Windows Media MPEG-4 비디오 디코더 원격 코드 실행 취약성 Remote Desktop Client CVE-2021-34535 원격 데스크톱 클라이언트 원격 코드 실행 취약성 Remote Desktop Connection Manager CVE-2020-0765 원격 데스크톱 연결 관리자 정보 유출 취약성 Windows Bluetooth Service CVE-2021-34537 Windows Bluetooth 드라이버 권한 상승 취약성 Windows Cryptographic Services CVE-2021-36938 Windows 암호화 기본 형식 라이브러리 정보 공개 취약성 Windows Defender CVE-2021-34471 Microsoft Windows Defender 권한 상승 취약성 Windows Event Tracing CVE-2021-34487 Windows 이벤트 추적 권한 상승 취약성 Windows Event Tracing CVE-2021-34486 Windows 이벤트 추적 권한 상승 취약성 Windows Event Tracing CVE-2021-26425 Windows 이벤트 추적 권한 상승