{"uuid": "cd70d1d4-1561-4052-99cf-124eeed9a654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36934", "type": "seen", "source": "https://t.me/cissp/5560", "content": "Introduction\nSystem protection and creating restore points\n  CVE-2021-36934 also known as SeriousSAM and HiveNightmare vulnerability was discovered by Jonas Lykkegaard in July 2021. Due to an ACL misconfiguration in Windows 10 post-build 1809 and Windows 11, non-admin users are granted read access to the holy trio of SAM, SYSTEM, and SECURITY files under %windir%\\system32\\config directory. For this to be true, however, system protection has to be turned on and a volume shadow copy has to be created. The name \u2018HiveNightmare\u2019 is derived from a common name \u2018hives\u2019 which refers to the files that have registry data stored.", "creation_timestamp": "2026-09-02T01:04:14.014413Z"}