CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1–1 of 1 advisories (Page 1/1)
2021-10-13
Windows Win32k Elevation of Privilege Vulnerability (CVE-2021-41357) Analysis and Mitigation Guide
[Affected Scope] Microsoft Windows operating systems utilizing the Win32k kernel driver, including Windows 10, Windows 11, and Windows Server 2016/2019/2022
[Impact] A local attacker with low privileges can execute arbitrary code in kernel mode, leading to complete system takeover (SYSTEM privileges)
[Mitigation] Immediately apply the official Microsoft Cumulative Updates (LCU) and restrict local interactive access on unpatched assets