CVE-2021-36948VulnerabilityPublished 11/03/2021Updated 10/24/2026

CVE-2021-36948: Microsoft Windows Update Medic Service Privilege Escalation Vulnerability

Affects Microsoft WindowsSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 11/03/2021
KEV deadline: 11/17/2021
EPSS: 23.3% chance of exploitation in 30 days – higher than 97% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2021-36948 (opens in a new tab)

Description

CVE-2021-36948 is a privilege escalation vulnerability in the Microsoft Windows Update Medic Service. The vulnerability is unspecified in detail but has been confirmed to allow attackers to elevate privileges on affected Windows systems. It has been exploited in the wild, indicating active use by threat actors. No specific affected Windows versions are provided in the available data. The severity is assessed as high due to the nature of privilege escalation and confirmed exploitation.

Summary

Microsoft Windows Update Medic Service contains an unspecified vulnerability (CVE-2021-36948) that enables privilege escalation. This vulnerability has been exploited in the wild, demonstrating active threat exploitation. No detailed technical information or affected version ranges are provided. The vulnerability impacts Windows operating systems where the Windows Update Medic Service is present.

Impact

Successful exploitation of this vulnerability allows an attacker to escalate privileges on a Windows system, potentially gaining higher-level access than initially permitted. This can lead to unauthorized system modifications or further compromise. The vulnerability has confirmed exploitation in the wild, increasing the risk to affected systems.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or workaround information is provided in the available data. Administrators should monitor Microsoft security advisories for updates and apply any released fixes promptly.

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 09:19:19 UTC

References

Related threats