KEVIntel
7.8
CVSS
High

CVE-2021-41357

PUBLISHED

Win32k Elevation of Privilege Vulnerability

Exploited in the wild Low complexity No user interaction
Vendor
Microsoft
Product
Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2
Published
Oct 13, 2021
EPSS

Description

Win32k Elevation of Privilege Vulnerability

windows cisa microsoft

CVSS scores

CVSS v3.1 7.8 High

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C

Exploitation status

Exploited in the wild

Recorded 2022-04-25 00:00:00 UTC · Source

SSVC decision points

Exploitation
active
Automatable
No
Technical impact
total

Known exploited vulnerability sources

Catalogues that list this CVE as a known exploited vulnerability.

Source Added
CISA Apr 25, 2022

Timeline

  • CVE ID Reserved

  • CVE Published to Public

  • Added to KEVIntel