CVE-2021-40449

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Win32k Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Oct 13, 2021
Last modified
Jun 17, 2026
Added to CISA KEV
Nov 17, 2021
NVD status
Analyzed

Related CVEs from 2021

CVE-2021-40459.8TP-Link Tapo C200 IP camera, on its 1.1.15 firmware version and below, is affected by an unauthenticated RCE vulnerability, present in the uCVE-2021-404507.8Win32k Elevation of Privilege VulnerabilityCVE-2021-404527.8HEVC Video Extensions Remote Code Execution VulnerabilityCVE-2021-404537.8HEVC Video Extensions Remote Code Execution VulnerabilityCVE-2021-404545.5Rich Text Edit Control Information Disclosure VulnerabilityCVE-2021-404555.5Windows Installer Spoofing VulnerabilityCVE-2021-404565.3Windows AD FS Security Feature Bypass VulnerabilityCVE-2021-404577.4Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting VulnerabilityCVE-2021-40465.4The m_txtNom y m_txtCognoms parameters in TCMAN GIM v8.01 allow an attacker to perform persistent XSS attacks. This vulnerability could be uCVE-2021-404606.5Windows Remote Procedure Call Runtime Security Feature Bypass VulnerabilityCVE-2021-404618.0Windows Hyper-V Remote Code Execution VulnerabilityCVE-2021-404627.8Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability
CVE-2021-40449: High severity, CVSS 7.8 | Vulnix