CyberSec.Space Logo
Back to CVE Browser

CVE-2021-1732

🔥 Known Exploited (CISA KEV)HIGH
7.8
CVSS Severity Score
EPSS Score75.4570%
EPSS Percentile93.00th
Published2021-02-25
Last Modified2025-10-30
Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

Windows Win32k Elevation of Privilege Vulnerability

Affected Platforms (CPE)

💻
Microsoft

Windows 10 1803

All versions
💻
Microsoft

Windows 10 1809

All versions
💻
Microsoft

Windows 10 1909

All versions
💻
Microsoft

Windows 10 2004

All versions

References & Advisories

🔗 http://packetstormsecurity.com/files/161880/Win32k-ConsoleControl-Offset-Confusion.html
🔗 http://packetstormsecurity.com/files/166169/Win32k-ConsoleControl-Offset-Confusion-Privilege-Escalation.html
🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1732
🔗 http://packetstormsecurity.com/files/161880/Win32k-ConsoleControl-Offset-Confusion.html
🔗 http://packetstormsecurity.com/files/166169/Win32k-ConsoleControl-Offset-Confusion-Privilege-Escalation.html
🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1732
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-1732

Related Security Intelligence Articles

Daily Global Cyber Threat Intelligence Digest — July 29, 2026

Today’s threat intelligence covers active exploitation of Arista VeloCloud CVE-2026-16812, unauthenticated TeamCity RCE CVE-2026-63077, exposed IPMI/BMC password risks, and the Origin Energy and MCBS breach updates.

2026-07-29

Daily Global Cyber Threat Intelligence Digest — July 28, 2026

Today’s threat intelligence covers the Certighost CVE-2026-54121 AD CS domain-takeover chain, vBulletin CVE-2026-61511 pre-auth RCE, the expanding Dysphoria botnet, and the DentaQuest and Fairlife breach updates.

2026-07-28

Weekly Cybersecurity News: Jul 27, 2026

Weekly cybersecurity news covering active exploitation of Check Point SmartConsole CVE-2026-16232, Qilin ransomware leveraging PAN-OS GlobalProtect vulnerabilities, Russian LAUNDRY BEAR targeting Zimbra email servers, and FakeGit malicious repositories.

2026-07-27

Related Vulnerabilities

CVE-2026-419399.3

Care Everywhere Gateway 14.3.10 contains a hard-coded credentials vulnerability in the bundled WildFly 8.2.0.Final management inte...

CVE-2026-624366.5

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] ...

CVE-2026-624356.5

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] ...

CVE-2026-656246.9

Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows an unauthenticated remote attacker t...