Actively exploited in the wild
Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2021-11-03. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2021-36942
HighCVSS 7.5KEVExploitation Probability (EPSS)
Very high risk99th percentile - higher than 99% of all known CVEs
Summary
A spoofing vulnerability in Windows LSA (Local Security Authority).
Risk Assessment
An attacker could exploit this to impersonate the LSA service, potentially leading to unauthorized access or privilege escalation.
Recommendation
Apply the relevant security update provided by Microsoft.
Other vulnerabilities in Windows LSA
See all- CVE-2022-26925HighActively exploited
A spoofing vulnerability in the Windows LSA service. An attacker can force a domain controller to authenticate to a malicious server.
- CVE-2021-33788High
Denial of service vulnerability in Windows LSA. Could cause service failure.
- CVE-2021-33786High
Security feature bypass vulnerability in Windows LSA (Local Security Authority). An attacker could bypass security mechanisms.
Original NVD description (English source)
Windows LSA Spoofing Vulnerability