CVE-2021-40449

Microsoft Windows Win32k Privilege Escalation Vulnerability
81.9%
EPSS
100%
Percentile
Yes
Known exploited
0
APAC news · 90d
Summary

Unspecified vulnerability allows for an authenticated user to escalate privileges.

Vendor
Microsoft
Product
Windows
Added to KEV
Nov 17, 2021
Remediation due
Dec 1, 2021 (US federal deadline)
Ransomware use
Known
Weakness
CWE-416
EPSS
81.9% as of Nov 12
In the news
  • No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
  • none recorded