CVE-2021-40450
Win32k Elevation of Privilege Vulnerability
In short
A flaw in Windows' graphics system (Win32k) allows a user with basic access to gain administrative control over the computer. An attacker needs to run malicious code locally to exploit this vulnerability.
Technical detail
A privilege escalation vulnerability in the Win32k kernel component allows an authenticated local attacker to execute arbitrary code with elevated privileges through a specially crafted interaction with the graphics subsystem. Exploitation requires prior code execution in user-mode context and results in complete system compromise.
Summary generated and translated by AI from the official description.
Win32k Elevation of Privilege Vulnerability
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Affected products
Microsoft · Windows 10 Version 1809Microsoft · Windows 10 Version 1909Microsoft · Windows 10 Version 2004Microsoft · Windows 10 Version 20H2Microsoft · Windows 10 Version 21H1Microsoft · Windows 11 version 21H2Microsoft · Windows Server 2019Microsoft · Windows Server 2019 (Server Core installation)Microsoft · Windows Server 2022Microsoft · Windows Server version 2004Microsoft · Windows Server version 20H2Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →