PT-2021-2382

CVE-2021-26900

Published

2021-03-09

Updated

2023-12-29

Description by

CVSS 3.1

7.8

High

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows (affected versions not specified)

Description The issue is related to insufficient access control in the Win32k component of Windows operating systems, which can be exploited to elevate privileges using a specially crafted application. This can allow an attacker to affect the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Impacts

Researchers

Jeongoh Kyea

Kkokkokye

Vendors

Affected products

Weakness enumeration

CWE-416: Use After Free

CWE-264

Related identifiers

CVE-2021-26900