返回 CVE 浏览器

CVE-2021-40449

🔥 Known Exploited (CISA KEV)HIGH

7.8

CVSS Severity Score

EPSS Score70.9480%

EPSS Percentile85.31th

Published2021-10-13

Last Modified2025-10-30

Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

Win32k Elevation of Privilege Vulnerability

Affected Platforms (CPE)

💻

Microsoft

Windows 10 1507

< 10.0.10240.19086

💻

Microsoft

Windows 10 1607

< 10.0.14393.4704

💻

Microsoft

Windows 10 1809

< 10.0.17763.2237

💻

Microsoft

Windows 10 1909

< 10.0.18363.1854

References & Advisories

🔗 http://packetstormsecurity.com/files/164926/Win32k-NtGdiResetDC-Use-After-Free-Local-Privilege-Escalation.html

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40449

🔗 http://packetstormsecurity.com/files/164926/Win32k-NtGdiResetDC-Use-After-Free-Local-Privilege-Escalation.html

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40449

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-40449

相關資安分析文章

每日全球网络威胁情报摘要｜2026 年 7 月 28 日

本期威胁情报聚焦 Certighost CVE-2026-54121 的 AD CS 域接管攻击链、vBulletin CVE-2026-61511 预身份认证 RCE、Dysphoria 僵尸网络扩张，以及 DentaQuest 与 Fairlife 数据泄露及勒索事件。

周度网络安全新闻：2026 年 7 月 27 日

本周重大安全周报聚焦于 Check Point SmartConsole CVE-2026-16232 验证绕过之在野利用、PAN-OS GlobalProtect 漏洞与 Qilin 勒索软件侵袭、俄罗斯 LAUNDRY BEAR 对 Zimbra 进行之国家级电子邮件间谍活动，以及 Windchill 与 FakeGit 恶意 Repositories 威胁趋势。

每日全球网络威胁情报摘要｜2026 年 7 月 24 日

本期情报聚焦于 Check Point CVE-2026-16232 SmartConsole 控制平面身份验证绕过之主动利用、俄罗斯 LAUNDRY BEAR 利用 Zimbra 漏洞进行电子邮件间谍活动，以及假冒 Claude Desktop 的恶意广告攻击与 Chaos 勒索软件运作动态。

相关漏洞威胁

CVE-2026-419399.3

Care Everywhere Gateway 14.3.10 contains a hard-coded credentials vulnerability in the bundled WildFly 8.2.0.Final management inte...

CVE-2026-624366.5

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] ...

CVE-2026-624356.5

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] ...

CVE-2026-656246.9

Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows an unauthenticated remote attacker t...