Back to feed
EUVD-2021-7196 · Published Feb 25, 2021
Windows Win32k Elevation of Privilege Vulnerability
Technologies
Microsoft Windows Server 20H2Microsoft Windows 10 1809Microsoft Windows Server 2019Microsoft Windows Server 1909Microsoft Windows 10 1909Microsoft Windows 10 2004Microsoft Windows Server 2004Microsoft Windows 10 20H2Microsoft Windows 10 1803
Weaknesses
CWE-787
CVSS scores
- v3.17.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - v2.04.6
AV:L/AC:L/Au:N/C:P/I:P/A:P
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Privilege Escalation
References
- http://packetstormsecurity.com/files/161880/Win32k-ConsoleControl-Offset-Confusion.html
- http://packetstormsecurity.com/files/166169/Win32k-ConsoleControl-Offset-Confusion-Privilege-Escalation.html
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1732
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-1732
Potentially impacted assets
See if this affects your attack surface
