CVE-2021-1732: high-severity vulnerability in Microsoft Windows 10 Version 1803
Windows Win32k Elevation of Privilege Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Patch now. It under exploitation confirmed by CISA, has a working public exploit and 2 threat group(s) use it.
Groups known to exploit this vulnerability (MITRE ATT&CK attribution).
Apply updates per vendor instructions.
A flaw in Windows' graphics system (Win32k) allows a local attacker to gain administrative privileges on a computer. This is serious because someone with basic user access could take complete control of the machine.
A buffer overflow vulnerability in the Win32k kernel component allows local authenticated attackers to execute arbitrary code with kernel privileges through crafted window messages. Exploitation requires local system access but results in complete privilege escalation from user to system level.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.