CVE Catalog
Actively exploited in the wild
Microsoft Windows Update Medic Service Privilege Escalation Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2021-11-03. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2021-36948
HighCVSS 7.8KEVExploitation Probability (EPSS)
Very high risk19.91%
97th percentile - higher than 97% of all known CVEs
Summary
An elevation of privilege vulnerability in the Windows Update Medic Service.
Risk Assessment
An attacker could exploit this to gain elevated privileges, potentially allowing system modification or malware installation.
Recommendation
Apply the security update provided by Microsoft.
Original NVD description (English source)
Windows Update Medic Service Elevation of Privilege Vulnerability