CVE-2021-40449
Win32k Elevation of Privilege Vulnerability
KEV RANSOMWAREHIGH 7.8EPSS 74.1%
Win32k Elevation of Privilege Vulnerability
- Affected
- Microsoft · Windows 10 Version 1809 · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1909 · Windows 10 Version 21H1 · Windows Server 2022
- CVSS v3.1 NVD
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 4.6 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 74.13% chance of exploitation in the next 30 days, 99th percentile
- CISA KEV
- added 2021-11-17, used in ransomware campaigns
- Published
- 2021-10-13
- Updated
- 2025-10-21
Proof-of-concept exploits (10)
- http://packetstormsecurity.com/files/164926/Win32k-NtGdiResetDC-Use-After-Free-Local-Priv…
- BL0odz/CVE-2021-40449-NtGdiResetDC-UAF11★ · 2022-02-20
- CppXL/cve-2021-40449-poc1★ · 2021-11-12
- KaLendsi/CVE-2021-40449-Exploit106★ · 2021-10-28
- Kristal-g/CVE-2021-40449_poc54★ · 2021-11-07
- ReJimp/Kernel_Exploit11★ · 2022-04-30
- hakivvi/CVE-2021-4044947★ · 2021-11-05
- ly4k/CallbackHell484★ · 2021-11-11
- salutdamour/Kernel_Exploit11★ · 2022-04-30
- win32kdie/Kernel_Exploit11★ · 2022-04-30
Metasploit modules (1)
Exploit collections (1)
- CVE-2021-40449helloexp/0day