CVE-2021-40449

Опубликовано: 12 окт. 2021

Источник: msrc

CVSS3: 7.8

EPSS Высокий

Описание

Win32k Elevation of Privilege Vulnerability

Продукт	Статья	Обновление
Windows Server 2008 for 32-bit Systems Service Pack 2	5006736 5006715	Monthly Rollup Security Only
Windows Server 2008 for x64-based Systems Service Pack 2	5006736 5006715	Monthly Rollup Security Only
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)	5006736 5006715	Monthly Rollup Security Only
Windows 7 for 32-bit Systems Service Pack 1	5006743 5006728	Monthly Rollup Security Only
Windows 7 for x64-based Systems Service Pack 1	5006743 5006728	Monthly Rollup Security Only
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)	5006743 5006728	Monthly Rollup Security Only
Windows Server 2008 R2 for x64-based Systems Service Pack 1	5006743 5006728	Monthly Rollup Security Only
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)	5006736 5006715	Monthly Rollup Security Only
Windows Server 2012	5006739 5006732	Monthly Rollup Security Only
Windows Server 2012 (Server Core installation)	5006739 5006732	Monthly Rollup Security Only

Показывать по

Publicly Disclosed

Exploited

Yes

Latest Software Release

Exploitation Detected

Older Software Release

Exploitation Detected

DOS

N/A

EPSS

Процентиль: 99%

0.84576

Высокий

7.8 High

CVSS3

CVE-2021-40449

CVSS3: 7.8

nvd

больше 3 лет назад

Win32k Elevation of Privilege Vulnerability

GHSA-qjf4-g2gg-w6pq

CVSS3: 7.8

github

около 3 лет назад

Win32k Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-40450, CVE-2021-41357.

BDU:2021-05018

CVSS3: 8.8

fstec

больше 3 лет назад

Уязвимость компонента Win32k (Win32k.sys) операционных систем Windows, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 99%

0.84576

Высокий

7.8 High

CVSS3