Windows 10: Security broken after Upgrade – SAM accessible by users

Topic

New Reply

The newest nightmare in security. If you run Windows 10 from 1809 and above, it’s likely, that the SAM database is accessible after an upgrade to a higher Windows 10 version. Every user has a read access right and may dump the password base of Windows users. Windows 11 is also affected. I have compiled first details at:

Windows 10 upgrade breaks SAM access rights from 1809 upward, user access possible

Ex Microsoft Windows (Insider) MVP, Microsoft Answers Community Moderator, Blogger, Book author

https://www.borncity.com/win/

6 users thanked author for this post.

Microfix, doriel, Susan Bradley, Alex5723, EricB, Fred

Reply | Quote

Replies

I think this is more of a oh #$@% for businesses not consumers but it’s still extremely concerning that this stuff is missed.

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

[doriel]

I have no RX flag for my SAM database. Does it mean we are safe?

By the way, I wouldn’t panic, it is what it is. Applying workarounds to change ACLs yourself can break things, and it’s very likely that it’s been that way for years anyway. Eventually, MS will patch this.

Im OK, no panic here

Were on build 17763 (1809) and 19042 (20H2), mix of those two bilds.

Dell Latitude 3420, Intel Core i7 @ 2.8 GHz, 16GB RAM, W10 22H2 Enterprise

HAL3000, AMD Athlon 200GE @ 3,4 GHz, 8GB RAM, Fedora 29

PRUSA i3 MK3S+

• This reply was modified 3 years, 9 months ago by doriel.
• This reply was modified 3 years, 9 months ago by doriel. Reason: WINVER

Reply | Quote