Cyber Resilience

CVE-2021-36955

Microsoft Windows Server 2008 r2

CISA KEVActive ExploitationEUVD ExploitedRansomware-linked
Published
15 September 2021
Modified
10 August 2026
KEV Added
03 November 2021
Patch / advisory
CVSS Score v3.1 7.8
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.040 90th percentile
Risk Priority 83 floored blend · peak EPSS

Summary

CVE-2021-36955 is a high-severity an unspecified weakness vulnerability in Microsoft Windows Server 2008. Its CVSS base score is 7.8 (High).

Operationally, ranked in the top 10% of CVEs by exploit likelihood; CISA has added it to the Known Exploited Vulnerabilities catalog.

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

The vulnerability CVE-2021-36955 is an elevation of privilege flaw in the Windows Common Log File System Driver. It carries a CVSS 3.1 base score of 7.8 and affects local users on supported Windows systems.

An attacker with low privileges and no user interaction required can exploit the issue locally to obtain full control over confidentiality, integrity, and availability on the affected host.

Microsoft has published remediation guidance through its Security Response Center advisory, while CISA lists the vulnerability in its catalog of known exploited vulnerabilities, confirming active exploitation in the wild and underscoring the need for prompt patching.

EU & UK References

Vulnerability Data

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CWE(s)
KEV Date Added
03 November 2021

Related Threats

CVEs Like This One

CVE-2021-40444Same product: Microsoft Windows 10 1507both on KEV
CVE-2021-41379Same product: Microsoft Windows 10 1507both on KEV
CVE-2021-31979Same product: Microsoft Windows 10 1507both on KEV
CVE-2021-31956Same product: Microsoft Windows 10 1507both on KEV
CVE-2021-31199Same product: Microsoft Windows 10 1507both on KEV
CVE-2021-34484Same product: Microsoft Windows 10 1507both on KEV
CVE-2021-31201Same product: Microsoft Windows 10 1507both on KEV
CVE-2021-43226Same product: Microsoft Windows 10 1507both on KEV
CVE-2021-40449Same product: Microsoft Windows 10 1507both on KEV
CVE-2021-1675Same product: Microsoft Windows 10 1507both on KEV

Affected Assets

microsoft
windows 10 1507
≤ 10.0.10240.19060
microsoft
windows 10 1607
≤ 10.0.14393.4651
microsoft
windows 10 1809
≤ 10.0.17763.2183
microsoft
windows 10 1909
≤ 10.0.18363.1801
microsoft
windows 10 2004
≤ 10.0.19041.1237
microsoft
windows 10 20h2
≤ 10.0.19042.1237
microsoft
windows 10 21h1
≤ 10.0.19043.1237
microsoft
windows 7
all versions
microsoft
windows 8.1
all versions
microsoft
windows rt 8.1
all versions
+7 more product configuration(s) — see NVD for full list

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References