Vulnerability Details CVE-2021-1732
Windows Win32k Elevation of Privilege Vulnerability
Exploit prediction scoring system (EPSS) score
EPSS Score 0.906
EPSS Ranking 99.6%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 4.6
Proposed Action
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
Ransomware Campaign
Known
References
- http://packetstormsecurity.com/files/161880/Win32k-ConsoleControl-Offset-Confusion.html
- http://packetstormsecurity.com/files/166169/Win32k-ConsoleControl-Offset-Confusion-Privilege-Escalation.html
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1732
- http://packetstormsecurity.com/files/161880/Win32k-ConsoleControl-Offset-Confusion.html
- http://packetstormsecurity.com/files/166169/Win32k-ConsoleControl-Offset-Confusion-Privilege-Escalation.html
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1732
Products affected by CVE-2021-1732
-
cpe:2.3:o:microsoft:windows_10_1803:-
-
cpe:2.3:o:microsoft:windows_10_1809:-
-
cpe:2.3:o:microsoft:windows_10_1909:-
-
cpe:2.3:o:microsoft:windows_10_2004:-
-
cpe:2.3:o:microsoft:windows_10_20h2:-
-
cpe:2.3:o:microsoft:windows_server_1909:-
-
cpe:2.3:o:microsoft:windows_server_2004:-
-
cpe:2.3:o:microsoft:windows_server_2019:-
-
cpe:2.3:o:microsoft:windows_server_20h2:-