Detections
Analytics
CVE-2021-40449
high
Description
Win32k Elevation of Privilege Vulnerability
From the Tenable Blog
Microsoft’s October 2021 Patch Tuesday Addresses 74 CVEs (CVE-2021-40449)
Published: 2021-10-12
Microsoft addresses 74 CVEs in its October 2021 Patch Tuesday release, including another Print Spooler flaw and a zero-day vulnerability in Win32k that was exploited in the wild.
References
https://www.edgescan.com/wp-content/uploads/2024/03/2023-Vulnerability-Statistics-Report.pdf
https://securelist.com/mysterysnail-new-version/116226/
https://securelist.com/updated-mata-attacks-industrial-companies-in-eastern-europe/110829/
https://www.tenable.com/cyber-exposure/a-look-inside-the-ransomware-ecosystem
https://www.tenable.com/cyber-exposure/2021-threat-landscape-retrospective
https://www.tenable.com/blog/microsofts-june-2024-patch-tuesday-addresses-49-cves
https://www.tenable.com/blog/microsofts-may-2023-patch-tuesday-addresses-38-cves-cve-2023-29336
https://www.tenable.com/blog/microsoft-s-october-2021-patch-tuesday-addresses-74-cves-cve-2021-40449
https://github.com/Joe1sn/CVE_2021_40449
https://github.com/qiushan996/poctracker
https://github.com/whoismept/IronSharp
https://github.com/Kristal-g/CVE-2021-40449_poc
https://github.com/ly4k/CallbackHell
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-40449
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40449