CVE-2021-36942: Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability

High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 66% chance of exploitation in the next 30 days.

Windows LSA Spoofing Vulnerability

Affected products

• Microsoft Windows Server 2004: before 10.0.19041.1165 (fixed in 10.0.19041.1165)
• Microsoft Windows Server 2008: affected versions not specified; version r2 only
• Microsoft Windows Server 2012: affected versions not specified; version r2 only
• Microsoft Windows Server 2016: before 10.0.14393.4583 (fixed in 10.0.14393.4583)
• Microsoft Windows Server 2019: before 10.0.17763.2114 (fixed in 10.0.17763.2114)
• Microsoft Windows Server 20h2: before 10.0.19042.1165 (fixed in 10.0.19042.1165)

Published 2021-08-12. Last modified 2026-08-10.