CVE-2021-28310: Win32k Elevation of Privilege Vulnerability
Published Apr 13, 2021
·Updated
Microsoft Windows Win32k contains an unspecified vulnerability that allows for privilege escalation.
Other sources
Win32k Elevation of Privilege Vulnerability
— NVD
Affected Software
18 affected components
Microsoft Win32k
Microsoft Windows 10 1803
Microsoft Windows 10 1809
Microsoft Windows 10 1909
Microsoft Windows 10 2004
Microsoft Windows 10 20h2
Microsoft Windows Server 1909
Microsoft Windows Server 2004
Microsoft Windows Server 2019
Microsoft Windows Server 20h2
Microsoft Windows 10=20h2
Microsoft Windows 10=1803
Microsoft Windows 10=1809
Microsoft Windows 10=1909
Microsoft Windows 10=2004
Microsoft Windows Server 2016=20h2
Microsoft Windows Server 2016=1909
Microsoft Windows Server 2016=2004
Remediation
Event History
Apr 13, 2021
CVE Published
via MITRE·07:32 PM
Data Sourced
via MITRE·07:32 PM
DescriptionSeverity
Data Sourced
via NVD·08:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Nov 3, 2021
Known Exploited
via CISA·12:00 AM
Frequently Asked Questions
1
What is the severity of CVE-2021-28310?
CVE-2021-28310 is classified as a critical vulnerability due to its potential for privilege escalation.
2
How do I fix CVE-2021-28310?
To fix CVE-2021-28310, ensure that all relevant Microsoft Windows updates are promptly installed.
3
Which versions of Windows are affected by CVE-2021-28310?
CVE-2021-28310 affects multiple versions of Microsoft Windows 10 and Windows Server, including 1803, 1809, 1909, 2004, and 20H2.
4
What is the impact of CVE-2021-28310?
The impact of CVE-2021-28310 allows unauthorized users to gain elevated privileges on affected systems.
5
Is there a workaround for CVE-2021-28310?
Currently, there are no recommended workarounds for CVE-2021-28310, and applying updates is the best mitigation.