Skip to content
fr Sign in
7.8 High Exploited

CVE-2021-40450 Microsoft Win32k Privilege Escalation Vulnerability

Active exploitation observed

· CISA KEV catalogue
Required action Apply updates per vendor instructions.
Ransomware campaigns Not observed so far

Description

Win32k Elevation of Privilege Vulnerability

Affected products and versions

Product Affected versions Fixed in
Windows 10 Version 1809 10.0 10.0.0 → < 10.0.17763.2237 10.0.17763.2237
Windows Server 2019 10.0 10.0.0 → < 10.0.17763.2237 10.0.17763.2237
Windows Server 2019 (Server Core installation) 10.0 10.0.0 → < 10.0.17763.2237 10.0.17763.2237
Windows 10 Version 1909 10.0 10.0.0 → < 10.0.18363.1854 10.0.18363.1854
Windows 10 Version 21H1 10.0 10.0.0 → < 10.0.19043.1288 10.0.19043.1288
Windows Server 2022 10.0 10.0.0 → < 10.0.20348.288 10.0.20348.288
Windows 10 Version 2004 10.0 10.0.0 → < 10.0.19041.1288 10.0.19041.1288
Windows Server version 2004 10.0 10.0.0 → < 10.0.19041.1288 10.0.19041.1288
Windows 10 Version 20H2 10.0 10.0.0 → < 10.0.19042.1288 10.0.19042.1288
Show the 2 other branches
Product Affected versions Fixed in
Windows Server version 20H2 10.0 10.0.0 → < 10.0.19042.1288 10.0.19042.1288
Windows 11 version 21H2 10.0 10.0.0 → < 10.0.22000.258 10.0.22000.258

References

Timeline

  1. Published
  2. Added to the KEV catalogue
  3. Last modified

Other CVEs of Windows 10 Version 1809

The 5349 CVEs of Windows 10 Version 1809 →
CVE-2026-108136 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally 7.8 High CVE-2026-108471 Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to… 8.8 High CVE-2026-108129 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network 6.5 Medium CVE-2026-108132 Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally 7.0 High
Track this CVE