Microsoft · Win32k
CVE-2021-40450
Win32k Elevation of Privilege Vulnerability
Exploited in attacks
High 7.8 Attack chance: 1.6%
What it is
Win32k Elevation of Privilege Vulnerability
CISA: Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
What to do
Apply updates per vendor instructions.
Deadline for US federal agencies: May 16, 2022
More exploited flaws from Microsoft
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Jun 22, 2023 | Privilege Escalation | Win32k | High 7.8 | 14% |
| May 9, 2023 | Privilege Escalation | Win32k | High 7.8 | 41% |
| May 25, 2022 | Privilege Escalation | Win32k | High 8.8 | 15% |
| May 23, 2022 | Privilege Escalation | Win32k | High 7.8 | 3.0% |
| May 4, 2022 | Privilege Escalation | Win32k | High 7.8 | 87% |
| Apr 25, 2022 | Privilege Escalation | Win32k | High 7.8 | 1.6% |
| Mar 28, 2022 | Privilege Escalation | Win32k | High 7.8 | 39% |
| Mar 15, 2022 | Memory Corruption | Win32k | High 8.2 | 10% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.