CVE-2021-41357

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Win32k Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Oct 13, 2021
Last modified
Jun 17, 2026
Added to CISA KEV
Apr 25, 2022
NVD status
Analyzed

Related CVEs from 2021

CVE-2021-41367.8vim is vulnerable to Heap-based Buffer OverflowCVE-2021-413607.8HEVC Video Extensions Remote Code Execution VulnerabilityCVE-2021-413615.4Active Directory Federation Server Spoofing VulnerabilityCVE-2021-413634.2Intune Management Extension Security Feature Bypass VulnerabilityCVE-2021-413658.8Microsoft Defender for IoT Remote Code Execution VulnerabilityCVE-2021-413667.8Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege VulnerabilityCVE-2021-413677.8NTFS Elevation of Privilege VulnerabilityCVE-2021-413686.1Microsoft Access Remote Code Execution VulnerabilityCVE-2021-413707.8NTFS Elevation of Privilege VulnerabilityCVE-2021-413714.4Windows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityCVE-2021-413727.6A Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerability exists when Power BI Report Server Template file (pbix) conCVE-2021-413735.5FSLogix Information Disclosure Vulnerability
CVE-2021-41357: High severity, CVSS 7.8 | Vulnix