Every CVE Search/ Get API key

CVE-2021-1732

Windows Win32k Elevation of Privilege Vulnerability

7.8 HighIn KEVPublic exploit

Windows Win32k Elevation of Privilege Vulnerability

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

78.4%Up 8.0 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 7.8

Windows Win32k Elevation of Privilege Vulnerability

Windows Win32k Elevation of Privilege Vulnerability

Record
CVE-2021-1732
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
Weakness
CWE-787
Updated
2026-11-02
EUVDEUVD-2021-7196 7.8

Windows Win32k Elevation of Privilege Vulnerability

Record
EUVD-2021-7196
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
Updated
2026-11-02
GitHub AdvisoriesGHSA-gvwr-5hrc-2gr5 7.8

Windows Win32k Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1698.

Windows Win32k Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1698.

Record
GHSA-gvwr-5hrc-2gr5
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-269, CWE-787
Updated
2026-11-02
CISA KEV No score

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.

Record
CVE-2021-1732
Weakness
CWE-787
Updated
2026-11-02
NVD 7.8

Windows Win32k Elevation of Privilege Vulnerability

Record
CVE-2021-1732
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
4.6 MediumAV:L/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-787
Updated
2026-11-02

Affected products

Show 7 moreShow less

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
MetasploitWin32k ConsoleControl Offset Confusion2021-02-09
PoC in GitHubKaLendsi/CVE-2021-1732-Exploit2021-03-05
PoC in GitHubflyinbedxyz/CVE-2021-17322021-03-08
PoC in GitHuboneoy/CVE-2021-1732-Exploit2021-03-09
PoC in GitHublinuxdy/CVE-2021-1732_exp2021-04-02
PoC in GitHubpo4sec/CVE-2021-17322021-04-23
PoC in GitHubexploitblizzard/Windows-Privilege-Escalation-CVE-2021-17322021-04-25
PoC in GitHubBeneficialCode/CVE-2021-17322021-09-24
PoC in GitHubExploitCN/CVE-2021-1732-EXP-2022-01-23
PoC in GitHubr1l4-i3pur1l4/CVE-2021-17322022-02-15
Show 4 moreShow less
Public exploits
SourceLinkDate
PoC in GitHubfenalik/CVE-2021-17322022-11-01
PoC in GitHub4dp/CVE-2021-17322023-03-09
PoC in GitHubyangshifan-git/CVE-2021-17322023-06-29
PoC in GitHubasepsaepdin/CVE-2021-17322023-07-11

History

History
RecordedChangedSources
exploitation, exploits
first indexedCVE List, EUVD, GitHub Advisories, CISA KEV, Metasploit, NVD, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-1732 is a high vulnerability (CVSS 7.8) in Microsoft Win32k, published February 25, 2021. CISA lists it as known to be exploited, since November 3, 2021. EUVD reports exploitation since November 3, 2021. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 78.4%, the 99th percentile. No source names a fixed version.

References

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open