CVE-2021-40449: high-severity vulnerability in Microsoft Windows 10 Version 1507
Win32k Elevation of Privilege Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Patch now. It under exploitation confirmed by CISA and has a working public exploit.
Apply updates per vendor instructions.
A flaw in Windows' graphical interface system (Win32k) allows an attacker who has already gained basic access to a computer to gain full administrative control. This happens because the system doesn't properly manage memory, leaving it vulnerable to manipulation.
Use-after-free vulnerability in Win32k kernel driver enabling local privilege escalation; requires prior code execution with limited privileges. Attacker can manipulate freed memory objects to execute arbitrary code in kernel context, achieving SYSTEM-level access.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.