CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-02-25
Microsoft Windows Win32k Kernel Elevation of Privilege Vulnerability (CVE-2021-1732) Deep Dive & Mitigation Guide
[Affected Scope] Microsoft Windows operating systems utilizing the win32k.sys driver, including Windows 10 and Windows Server 2016/2019.
[Impact] A local attacker with low privileges can trigger kernel memory corruption (Out-of-bounds Write) to execute arbitrary code with SYSTEM privileges, leading to full host compromise.
[Mitigation] Immediately apply the official Microsoft cumulative security updates and restrict local execution privileges for non-administrative users.