CVE-2021-36959
published 2021-09-15CVE-2021-36959: Windows Authenticode Spoofing Vulnerability Windows Authenticode Spoofing Vulnerability
low3.3CVSS 3.1
AVLACLPRNUIRSUCNILAN
EPSS
1.33%
69.2th percentile
Windows Authenticode Spoofing Vulnerability
Windows Authenticode Spoofing Vulnerability
Affected
36 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | windows_10_version_1507 | >= 10.0.0 < 10.0.10240.19060 | 10.0.10240.19060 |
| microsoft | windows_10_version_1607 | >= 10.0.0 < 10.0.14393.4651 | 10.0.14393.4651 |
| microsoft | windows_10_version_1809 | >= 10.0.0 < 10.0.17763.2183 | 10.0.17763.2183 |
| microsoft | windows_10_version_1909 | >= 10.0.0 < 10.0.18363.1801 | 10.0.18363.1801 |
| microsoft | windows_10_version_2004 | >= 10.0.0 < 10.0.19041.1237 | 10.0.19041.1237 |
| microsoft | windows_10_version_20h2 | >= 10.0.0 < 10.0.19042.1237 | 10.0.19042.1237 |
| microsoft | windows_10_version_21h1 | >= 10.0.0 < 10.0.19043.1237 | 10.0.19043.1237 |
| microsoft | windows_7 | >= 6.1.0 < 6.1.7601.25712 | 6.1.7601.25712 |
| microsoft | windows_7_service_pack_1 | >= 6.1.0 < 6.1.7601.25712 | 6.1.7601.25712 |
| microsoft | windows_8.1 | >= 6.3.0 < 6.3.9600.20120 | 6.3.9600.20120 |
| microsoft | windows_server_2008_r2_service_pack_1 | >= 6.0.0 < 6.1.7601.25712 | 6.1.7601.25712 |
| microsoft | windows_server_2008_r2_service_pack_1 | >= 6.1.0 < 6.1.7601.25712 | 6.1.7601.25712 |
| microsoft | windows_server_2008_service_pack_2 | >= 6.0.0 < 6.0.6003.21218 | 6.0.6003.21218 |
| microsoft | windows_server_2012 | >= 6.2.0 < 6.2.9200.23462 | 6.2.9200.23462 |
| microsoft | windows_server_2012_r2 | >= 6.3.0 < 6.3.9600.20120 | 6.3.9600.20120 |
| microsoft | windows_server_2016 | >= 10.0.0 < 10.0.14393.4651 | 10.0.14393.4651 |
| microsoft | windows_server_2019 | >= 10.0.0 < 10.0.17763.2183 | 10.0.17763.2183 |
| microsoft | windows_server_2022 | >= 10.0.0 < 10.0.20348.230 | 10.0.20348.230 |
| microsoft | windows_server_version_2004 | >= 10.0.0 < 10.0.19041.1237 | 10.0.19041.1237 |
| microsoft | windows_server_version_20h2 | >= 10.0.0 < 10.0.19042.1237 | 10.0.19042.1237 |
| msrc | windows_10 | — | — |
| msrc | windows_10_version_1607 | — | — |
| msrc | windows_10_version_1809 | — | — |
| msrc | windows_10_version_1909 | — | — |
| msrc | windows_10_version_2004 | — | — |
CVSS provenance
nvdv3.13.3LOWCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
cvelistv55.5MEDIUM
vendor_msrc5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Microsoft Windows up to Server 2022 Authenticode
vuldb·2026-08-11·CVSS 3.3
CVE-2021-36959 [LOW] Microsoft Windows up to Server 2022 Authenticode
A vulnerability classified as problematic has been found in Microsoft Windows. The impacted element is an unknown function of the component Authenticode. This manipulation causes an unknown weakness.
The identification of this vulnerability is CVE-2021-36959. The attack can only be executed locally. There is no exploit available.
Applying a patch is the recommended action to fix this issue.
CVEList
Windows Authenticode Spoofing Vulnerability
cvelistv5·2021-09-15·CVSS 5.5
CVE-2021-36959 [MEDIUM] Windows Authenticode Spoofing Vulnerability
Windows Authenticode Spoofing Vulnerability
Windows Authenticode Spoofing Vulnerability
Microsoft
Windows Authenticode Spoofing Vulnerability
vendor_msrc·2021-09-14·CVSS 5.5
CVE-2021-36959 [MEDIUM] Windows Authenticode Spoofing Vulnerability
Windows Authenticode Spoofing Vulnerability
Windows Authenticode: Windows Authenticode
Microsoft: Microsoft
Impact: Spoofing
Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005568
Reference: https://support.microsoft.com/help/5005568
Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005566
Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005565
Reference: https://support.microsoft.com/help/5005565
Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005575
Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5005569
No detection rules found.
No public exploits indexed.
2021-09-15
Published