CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-10-13
Windows Win32k NtGdiResetDC Use-After-Free Local Privilege Escalation Vulnerability (CVE-2021-40449) Technical Analysis and Mitigation Guide
[Affected Scope] Microsoft Windows operating systems, including Windows 10, Windows 11, and Windows Server 2016/2019/2022 utilizing the Win32k kernel driver
[Impact] Local attackers can execute arbitrary code in kernel mode, escalating privileges from a standard user to SYSTEM, with active exploitation observed in the wild by APT groups
[Mitigation] Immediately apply the official Microsoft Latest Cumulative Update (LCU) and restrict local execution privileges on unpatched systems