High · 7.8 CVE-2021-36974 EUVD-2021-23550GHSA-hjqw-qpp5-qxjg

Windows SMB Elevation of Privilege Vulnerability

Published Sep 15, 2021 · Updated Aug 10, 2026 · Assigned by microsoft

Vendor: Microsoft Product: Windows 10 Version 1507 Product: Windows 10 Version 1607 Product: Windows 10 Version 1809 Product: Windows 10 Version 1909 Product: Windows 10 Version 2004 Product: Windows 10 Version 20H2 Product: Windows 10 Version 21H1 Product: Windows 8.1 Product: Windows Server 2012 Product: Windows Server 2012 (Server Core installation) Product: Windows Server 2012 R2 Product: Windows Server 2012 R2 (Server Core installation) Product: Windows Server 2016 Product: Windows Server 2016 (Server Core installation) Product: Windows Server 2019 Product: Windows Server 2019 (Server Core installation) Product: Windows Server 2022 Product: Windows Server version 2004 Product: Windows Server version 20H2 Platform: Windows

Description

Windows SMB Elevation of Privilege Vulnerability

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Windows 10 Version 1507	10.0.10240.0 – < 10.0.10240.19060	10.0.10240.19060
Microsoft	Windows 10 Version 1607	10.0.14393.0 – < 10.0.14393.4651	10.0.14393.4651
Microsoft	Windows 10 Version 1809	10.0.17763.0 – < 10.0.17763.2183, 10.0.0 – < 10.0.17763.2183	10.0.17763.2183
Microsoft	Windows 10 Version 1909	10.0.0 – < 10.0.18363.1801	10.0.18363.1801
Microsoft	Windows 10 Version 2004	10.0.0 – < 10.0.19041.1237	10.0.19041.1237
Microsoft	Windows 10 Version 20H2	10.0.0 – < 10.0.19042.1237	10.0.19042.1237
Microsoft	Windows 10 Version 21H1	10.0.0 – < 10.0.19043.1237	10.0.19043.1237
Microsoft	Windows 8.1	6.3.0 – < 6.3.9600.20120	6.3.9600.20120
Microsoft	Windows Server 2012	6.2.9200.0 – < 6.2.9200.23462	6.2.9200.23462
Microsoft	Windows Server 2012 (Server Core installation)	6.2.9200.0 – < 6.2.9200.23462	6.2.9200.23462
Microsoft	Windows Server 2012 R2	6.3.9600.0 – < 6.3.9600.20120	6.3.9600.20120
Microsoft	Windows Server 2012 R2 (Server Core installation)	6.3.9600.0 – < 6.3.9600.20120	6.3.9600.20120
Microsoft	Windows Server 2016	10.0.14393.0 – < 10.0.14393.4651	10.0.14393.4651
Microsoft	Windows Server 2016 (Server Core installation)	10.0.14393.0 – < 10.0.14393.4651	10.0.14393.4651
Microsoft	Windows Server 2019	10.0.17763.0 – < 10.0.17763.2183	10.0.17763.2183
Microsoft	Windows Server 2019 (Server Core installation)	10.0.17763.0 – < 10.0.17763.2183	10.0.17763.2183
Microsoft	Windows Server 2022	10.0.20348.0 – < 10.0.20348.230	10.0.20348.230
Microsoft	Windows Server version 2004	10.0.0 – < 10.0.19041.1237	10.0.19041.1237
Microsoft	Windows Server version 20H2	10.0.0 – < 10.0.19042.1237	10.0.19042.1237

Advisories 1

MSRC-CVE-2021-36974 Windows SMB Elevation of Privilege Vulnerability Microsoft Security Response Center · Sep 23, 2021

References

Windows SMB Elevation of Privilege Vulnerability vendor-advisory patch