CVE DatabaseCVE-2021-1732

Updated 2026-08-12한국어 권고문 →

CVE-2021-17327.8/HIGHCISA KEVCWE-787CWE-787

CVE-2021-1732 Official NVD Security Advisory (CVSS 7.8)

⚡ Jump to Patch

Affected Vendors

security-advisory

Affected Components

software

Published Date

2021-02-25

CVSS v3.1

7.8

HIGH

EPSS (30d)

78.4%

FIRST.org

CISA KEV

Exploited

NVD Source ↗

Executive & SecOps Summary

SECOPS ASSESSMENT

Scope

Impacted configurations listed under CVE-2021-1732

Overview

Windows Win32k Elevation of Privilege Vulnerability...

Mitigation

Review official patches and verify network isolation controls.

Affected Products & Version Scope

Refer to official NVD CPE configuration entries

Remediation & Live Workaround Commands

PATCH & WORKAROUND

Apply the latest security updates provided by the official software maintainers.

Interactive SecOps Remediation Checklist

0/4 (0%)

Recommended Security Control & Mitigation Partner

Cloudflare Enterprise & Pro WAF

Audit runtime exposure and verify patching status via automated scanning.

Block Exploits Instantly with Managed Virtual Patching Rules

Can't patch production immediately? Deploy managed WAF rules at the edge to intercept RCE, SQLi, and deserialization payloads before they hit your origin server.

3-min setup · Automated Zero-Day Managed Rules

Deploy Instant WAF Protection Free

Practice Exploiting & Patching This Web Vulnerability in an Interactive Lab

Launch Hands-On Security Lab

Technical Root Cause & Exploitation Mechanics

Official NVD Technical Description

Windows Win32k Elevation of Privilege Vulnerability

CVSS Score: 7.8 (HIGH)
CWE IDs: CWE-787, CWE-787

Official Vendor Advisories & References

NVD Original English Description

Windows Win32k Elevation of Privilege Vulnerability

http://packetstormsecurity.com/files/161880/Win32k-ConsoleControl-Offset-Confusion.html

Source: secure@microsoft.com · Exploit, Third Party Advisory, VDB Entry

http://packetstormsecurity.com/files/166169/Win32k-ConsoleControl-Offset-Confusion-Privilege-Escalation.html

Source: secure@microsoft.com · Exploit, Third Party Advisory, VDB Entry

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1732

Source: secure@microsoft.com · Patch, Vendor Advisory

http://packetstormsecurity.com/files/161880/Win32k-ConsoleControl-Offset-Confusion.html

Source: af854a3a-2127-422b-91ae-364da2661108 · Exploit, Third Party Advisory, VDB Entry

http://packetstormsecurity.com/files/166169/Win32k-ConsoleControl-Offset-Confusion-Privilege-Escalation.html

Source: af854a3a-2127-422b-91ae-364da2661108 · Exploit, Third Party Advisory, VDB Entry

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1732

Source: af854a3a-2127-422b-91ae-364da2661108 · Patch, Vendor Advisory

Frequently Asked SecOps Questions (CVE-2021-1732)

FAQ

Q1. How critical is CVE-2021-1732 and is it actively exploited in the wild?

CVE-2021-1732 is rated CVSS 7.8 (HIGH) with a 30-day EPSS exploitation probability of 78.4%. It is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, requiring immediate emergency remediation.

Q2. Which vendors and products are affected by CVE-2021-1732?

Primary impacted vendors include security-advisory across software. Scope summary: Refer to official NVD CPE configuration entries

Q3. What temporary mitigations or workarounds exist for CVE-2021-1732 before patching?

[Mitigation] Review official patches and verify network isolation controls. Follow the CLI remediation commands and interactive SecOps checklist on this page to restrict exposure prior to your maintenance window.

SECOPS WORKBENCH INTEGRATION

Generate an Internal Engineering Notice or CISO Report for CVE-2021-1732

Instantly format this advisory into an executive CISO summary or engineering patch ticket.

Generate Report →

🔗 Related Advisories in Similar Stack (security-advisory)

View Category →

CVE-2026-1201147.2/HIGH

EPSS 0.4%

CVE-2026-120114 Technical Vulnerability Analysis & Patch Advisory (CVSS 7.2)

[Affected Scope] Systems running unpatched versions impacted by CVE-2026-120114

CVE-2026-39098.8/HIGHCISA KEV

EPSS 2.3%

Google Chrome Skia Graphics Engine Out-of-bounds Write Vulnerability (CVE-2026-3909) Technical Advisory

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 146.0.7680.75

CVE-2026-10513410.0/CRITICALCISA KEV

EPSS 81.8%

Ahsay AhsayCBS Replication Receiver Remote Code Execution (RCE) Vulnerability Advisory (CVE-2026-105134)

[Affected Scope] AhsayCBS versions up to 9.15.2.69 and 10.3.4.44, specifically the Replication Receiver component

CVE-2026-7565010.0/CRITICALCISA KEV

EPSS 34.7%

Adobe Commerce (Magento) Server-Side Template Injection (SSTI) Remote Code Execution (CVE-2026-75650)

[Affected Scope] All unpatched versions of Adobe Commerce and Magento Open Source.

SecOps Advisory Dispatch & RSS Feed

Subscribe to Daily Vulnerability Briefings & KEV Alerts

Concise morning briefings for SecOps, DevSecOps, and SRE teams covering newly exploited CVEs and mitigation priorities.

Slack / Teams / RSS Feed:

PatchKO