First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2021-34449

HighCVSS 7.0/10Last modified Aug 10, 2026

Description

Win32k Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
Microsoft	Windows 10 Version 1809	>= 10.0.17763.0, < 10.0.17763.2061
Microsoft	Windows 10 Version 1809	>= 10.0.0, < 10.0.17763.2061
Microsoft	Windows 10 Version 1909	>= 10.0.0, < 10.0.18363.1679
Microsoft	Windows 10 Version 2004	>= 10.0.0, < 10.0.19041.1110
Microsoft	Windows 10 Version 20H2	>= 10.0.0, < 10.0.19042.1110
Microsoft	Windows 10 Version 21H1	>= 10.0.0, < 10.0.19043.1110
Microsoft	Windows Server 2019	>= 10.0.17763.0, < 10.0.17763.2061
Microsoft	Windows Server 2019 (Server Core installation)	>= 10.0.17763.0, < 10.0.17763.2061
Microsoft	Windows Server version 2004	>= 10.0.0, < 10.0.19041.1110
Microsoft	Windows Server version 20H2	>= 10.0.0, < 10.0.19042.1110

References

Timeline

Published: Jul 16, 2021
Last modified: Aug 10, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-34457.5A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw allows an attacker to achieve code ex CVE-2021-344508.5Windows Hyper-V Remote Code Execution Vulnerability CVE-2021-344515.3Microsoft Office Online Server Spoofing Vulnerability CVE-2021-344527.8Microsoft Word Remote Code Execution Vulnerability CVE-2021-344537.5Microsoft Exchange Server Denial of Service Vulnerability CVE-2021-344545.5Windows Remote Access Connection Manager Information Disclosure Vulnerability CVE-2021-344557.8Windows File History Service Elevation of Privilege Vulnerability CVE-2021-344567.8Windows Remote Access Connection Manager Elevation of Privilege Vulnerability CVE-2021-344575.5Windows Remote Access Connection Manager Information Disclosure Vulnerability CVE-2021-344589.9Windows Kernel Remote Code Execution Vulnerability CVE-2021-344597.8Windows AppContainer Elevation Of Privilege Vulnerability CVE-2021-34465.5A flaw was found in libtpms in versions before 0.8.2. The commonly used integration of libtpms with OpenSSL contained a vulnerability relate

CVE-2021-34449: High severity, CVSS 7.0 | Vulnix