CVE-2021-36948

Exploited in the Wild ✓ Confirmed 0-Day ★ Google Project Zero
Triaged: March 5, 2026 2 articles

EPSS Score

Source: FIRST.org · 2026-05-24
1.05%
probability
This CVE has a 1.05% probability of being exploited in the next 30 days.
0% Top 77.8th percentile of all CVEs 100%
CVSS score unavailable
Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Description

Project Zero
Windows update medic service elevation of privilege

Google Project Zero

Patched
Aug. 11, 2021
Reported by
Microsoft Threat Intelligence Center (MSTIC)/ Microsoft Security Response Center (MSRC)
Root Cause Analysis
???

Signal Intelligence

Confidence
95%
EPSS 1.05%
Mentions 2
Last Seen Nov 09, 2021

CNA Information

Analyst Note

Auto-imported from Google Project Zero — confirmed zero-day by definition.

Triage Info

Decided atMar 05, 2026