ZeroDay Findings
Sign inSign up

Findings

CVE-2021-1732

Microsoft Win32k Privilege Escalation Vulnerability

Published Feb 25, 2021 · updated Aug 11, 2026 · microsoft windows 10 1803

Windows Win32k Elevation of Privilege Vulnerability

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Feb 25, 2021 · Catalog

    Detected

    Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.

  2. Nov 3, 2021 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Nov 17, 2021 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Aug 11, 2026 · Catalog

    Updated

    Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.

Required action

Apply updates per vendor instructions.

CISA due date Nov 17, 2021

Affected

  • cpe microsoft/windows 10 1803version unspecified
  • cpe microsoft/windows 10 1809version unspecified
  • cpe microsoft/windows 10 1909version unspecified
  • cpe microsoft/windows 10 2004version unspecified
  • cpe microsoft/windows 10 20h2version unspecified
  • cpe microsoft/windows server 1909version unspecified
  • cpe microsoft/windows server 2004version unspecified
  • cpe microsoft/windows server 2019version unspecified
  • vendor Microsoft Win32kversion unspecified

Sources

  • CISA KEVConfirmed exploitationCVE-2021-1732

    Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.

    cisa.gov
  • CVE.orgVulnerability recordCVE-2021-1732

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2021-1732

    30-day exploitation probability 78.4%

    first.org
  • Metasploit ModulesPublic exploit moduleexploit_windows/local/cve_2022_21882_win32k

    Public module reference (average). Module source is not copied into this catalog.

    rapid7.com
  • NIST NVDVulnerability recordCVE-2021-1732

    Windows Win32k Elevation of Privilege Vulnerability

    nvd.nist.gov
  • Packet Storm SecurityCited referencehttp://packetstormsecurity.com/files/161880/Win32k-ConsoleControl-Offset-Confusion.html

    Packet Storm link already published on the finding.

    packetstormsecurity.com
  • Packet Storm SecurityCited referencehttp://packetstormsecurity.com/files/166169/Win32k-ConsoleControl-Offset-Confusion-Privilege-Escalation.html

    Packet Storm link already published on the finding.

    packetstormsecurity.com

References