CVE-2021-28310

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Win32k Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Apr 13, 2021
Last modified
Jun 17, 2026
Added to CISA KEV
Nov 3, 2021
NVD status
Analyzed

Related CVEs from 2021

CVE-2021-283116.5Windows Application Compatibility Cache Denial of Service VulnerabilityCVE-2021-283123.3Windows NTFS Denial of Service VulnerabilityCVE-2021-283137.8Diagnostics Hub Standard Collector Service Elevation of Privilege VulnerabilityCVE-2021-283147.8Windows Hyper-V Elevation of Privilege VulnerabilityCVE-2021-283157.8Windows Media Video Decoder Remote Code Execution VulnerabilityCVE-2021-283164.2Windows WLAN AutoConfig Service Security Feature Bypass VulnerabilityCVE-2021-283175.5Microsoft Windows Codecs Library Information Disclosure VulnerabilityCVE-2021-283185.5Windows GDI+ Information Disclosure VulnerabilityCVE-2021-283197.5Windows TCP/IP Driver Denial of Service VulnerabilityCVE-2021-283207.8Windows Resource Manager PSM Service Extension Elevation of Privilege VulnerabilityCVE-2021-283217.8Diagnostics Hub Standard Collector Service Elevation of Privilege VulnerabilityCVE-2021-283227.8Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability