CVE-2021-36954: 
vulnerability analysis and mitigation

CVE-2021-36954 is a Windows Bind Filter Driver Elevation of Privilege Vulnerability that was disclosed on September 15, 2021. The vulnerability affects multiple versions of Windows 10 (versions 1809, 1909, 2004, 20H2, 21H1) and Windows Server (2019, 2022, version 2004, version 20H2) operating systems (NVD).

The vulnerability has received a CVSS v3.1 base score of 7.8 (HIGH) from NIST and 8.8 (HIGH) from Microsoft. The CVSS vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that it requires local access, low attack complexity, low privileges, and no user interaction to exploit. The vulnerability is associated with CWE-269 (Improper Privilege Management) (NVD).

If successfully exploited, this vulnerability could allow an attacker to gain elevated privileges on affected systems. The vulnerability impacts confidentiality, integrity, and availability with high severity ratings, potentially allowing complete access to the affected system (NVD).

Microsoft has released security updates to address this vulnerability. The fixes are available through the following KB updates: KB5005565 for Windows 10 versions 2004, 20H2, and 21H1, KB5005566 for version 1909, KB5005568 for version 1809 and Windows Server 2019, and KB5005575 for Windows Server 2022 (Rapid7).