CVE-2021-36927
published 2021-08-12CVE-2021-36927: Windows Digital TV Tuner device registration application Elevation of Privilege Vulnerability
PriorityP337high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.46%
36.8th percentile
Windows Digital TV Tuner device registration application Elevation of Privilege Vulnerability
Affected
22 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | windows_7 | >= 6.1.0 < 6.1.7601.25898 | 6.1.7601.25898 |
| microsoft | windows_7_service_pack_1 | >= 6.1.0 < 6.1.7601.25898 | 6.1.7601.25898 |
| microsoft | windows_8.1 | >= 6.3.0 < 6.3.9600.20303 | 6.3.9600.20303 |
| microsoft | windows_8.1 | >= 6.3.0 < 6.3.9600.20296 | 6.3.9600.20296 |
| microsoft | windows_server_2008 | — | — |
| microsoft | windows_server_2008_r2_service_pack_1 | >= 6.0.0 < 6.1.7601.25898 | 6.1.7601.25898 |
| microsoft | windows_server_2008_r2_service_pack_1 | >= 6.1.0 < 6.1.7601.25898 | 6.1.7601.25898 |
| microsoft | windows_server_2008_service_pack_2 | >= 6.0.0 < 6.0.6003.21416 | 6.0.6003.21416 |
| microsoft | windows_server_2012 | — | — |
| microsoft | windows_server_2012 | >= 6.2.0 < 6.2.9200.23645 | 6.2.9200.23645 |
| microsoft | windows_server_2012 | >= 6.2.0 < 6.2.9200.23639 | 6.2.9200.23639 |
| microsoft | windows_server_2012_r2 | >= 6.3.0 < 6.3.9600.20303 | 6.3.9600.20303 |
| msrc | windows_7_for_32-bit_systems_service_pack_1 | — | — |
| msrc | windows_7_for_x64-based_systems_service_pack_1 | — | — |
| msrc | windows_8.1_for_32-bit_systems | — | — |
| msrc | windows_8.1_for_x64-based_systems | — | — |
| msrc | windows_rt_8.1 | — | — |
| msrc | windows_server_2008_for_32-bit_systems_service_pack_2 | — | — |
| msrc | windows_server_2008_for_x64-based_systems_service_pack_2 | — | — |
| msrc | windows_server_2008_r2_for_x64-based_systems_service_pack_1 | — | — |
| msrc | windows_server_2012 | — | — |
| msrc | windows_server_2012_r2 | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
vendor_msrc7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-22mc-4x52-cw6q: Windows Digital TV Tuner device registration application Elevation of Privilege Vulnerability
ghsa_unreviewed·2022-05-24
CVE-2021-36927 [HIGH] CWE-269 GHSA-22mc-4x52-cw6q: Windows Digital TV Tuner device registration application Elevation of Privilege Vulnerability
Windows Digital TV Tuner device registration application Elevation of Privilege Vulnerability
Microsoft
Windows Digital TV Tuner device registration application Elevation of Privilege Vulnerability
vendor_msrc·2021-08-10·CVSS 7.8
CVE-2021-36927 [HIGH] Windows Digital TV Tuner device registration application Elevation of Privilege Vulnerability
Windows Digital TV Tuner device registration application Elevation of Privilege Vulnerability
Windows Media: Windows Media
Microsoft: Microsoft
Impact: Elevation of Privilege
Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5011552
Reference: https://support.microsoft.com/help/5011552
Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5011529
Reference: https://support.microsoft.com/help/5011529
Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5011564
Reference: https://support.microsoft.com/help/5011564
Reference: https://catalog.update.microsoft.com/v7/site/
No detection rules found.
No public exploits indexed.
2021-08-12
Published