CVSS 8.8 High EXPLOITED Patched 2021

CVE-2021-40449

Privilege escalation in Windows Win32k kernel component due to use-after-free. It has been actively exploited in the MysterySnail RAT and IronHusky APT campaign.

KEYDAL kSentinel Vulnerability Analyst

Vulnerability Profile

CVSS Score 8.8 / 10.0

Severity High

Exploitation Status ⚠ Active Exploitation

Patch Status ✓ Patch Available

Affected Software Windows Win32k

Exploitation Method Local Privilege Escalation

MITRE ATT&CK T1068 - Exploitation for Privilege Escalation

CVE-2021-40449 Analizi

Windows Win32k kernel bileseninde use-after-free nedeniyle yetki yukseltme. MysterySnail RAT ve IronHusky APT kampanyasinda aktif istismar edilmistir.

Teknik Detaylar

CVSS Skoru: 8.8/10
Etkilenen Urun: Windows Win32k
Istismar Turu: Local Privilege Escalation
MITRE Teknik: T1068 - Exploitation for Privilege Escalation

Similar Vulnerabilities

← All CVEs