CVE-2021-40450: Win32k Elevation of Privilege Vulnerability
Published Oct 13, 2021
·Updated
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
Other sources
Win32k Elevation of Privilege Vulnerability
Affected Software
32 affected components
Microsoft Windows 10 1809<10.0.17763.2237
Microsoft Windows 10 1909<10.0.18363.1854
Microsoft Windows 10 2004<10.0.19041.1288
Microsoft Windows 10 20h2<10.0.19042.1288
Microsoft Windows 10 21h1<10.0.19043.1288
Microsoft Windows 11 21h2<10.0.22000.258
Microsoft Windows Server 2004<10.0.19041.1288
Microsoft Windows Server 2019<10.0.17763.2237
Microsoft Windows Server 2022<10.0.20348.288
Microsoft Windows Server 20h2<10.0.19042.1288
Microsoft Win32k
Microsoft Windows 10=20h2
Microsoft Windows 10=20h2
Microsoft Windows 10=20h2
Microsoft Windows 10=21h1
Microsoft Windows 10=21h1
Microsoft Windows 10=21h1
Microsoft Windows 10=1809
Microsoft Windows 10=1809
Microsoft Windows 10=1809
Microsoft Windows 10=1909
Microsoft Windows 10=1909
Microsoft Windows 10=1909
Microsoft Windows 10=2004
Microsoft Windows 10=2004
Microsoft Windows 10=2004
Microsoft Windows 11
Microsoft Windows 11
Microsoft Windows Server=20h2
Microsoft Windows Server 2016=2004
Microsoft Windows Server 2019
Microsoft Windows Server 2022
Remediation
Event History
Oct 13, 2021
CVE Published
via MITRE·12:26 AM
Data Sourced
via MITRE·12:26 AM
DescriptionSeverity
Data Sourced
via NVD·01:15 AM
RemedyDescriptionSeverityAffected Software
Apr 25, 2022
Known Exploited
via CISA·12:00 AM
Frequently Asked Questions
1
What is CVE-2021-40450?
CVE-2021-40450 is a vulnerability in Microsoft Win32k that allows for privilege escalation.
2
Which versions of Microsoft Windows are affected by CVE-2021-40450?
Microsoft Windows 10 versions 20H2, 21H1, 1809, 1909, and 2004, Microsoft Windows 11, and Microsoft Windows Server versions 20H2, 2016, 2019, and 2022 are affected by CVE-2021-40450.
3
What is the severity of CVE-2021-40450?
CVE-2021-40450 has a severity rating of 7.8, which is considered high.
4
How can I fix CVE-2021-40450?
To fix CVE-2021-40450, Microsoft has released a security update. It is recommended to update your system to the latest version of Microsoft Windows or Windows Server.
5
Where can I find more information about CVE-2021-40450?
You can find more information about CVE-2021-40450 on the Microsoft Security Guidance website.