← back
CVE-2021-33771

Windows Kernel Elevation of Privilege Vulnerability

CVSS 7.8 HIGHEPSS 6.2%● KEV
Vexday Risk Score
51Attention
SSVC decision (CISA)
Act
Exploitation + impact → act immediately
CVSS 7.8EPSS 6.2%KEV simPoC Nuclei Metasploit Patch
Lifecycle
14 Jul 2021Published on NVD
03 Nov 2021Active exploitation (CISA KEV)
Recommendation: Patch as soon as possible — active exploitation confirmed.
In short

A flaw in the Windows Kernel allows an attacker with local access to run malicious code with higher system privileges than they should have. This is dangerous because it can give an attacker complete control over your computer.

Technical detail

Local privilege escalation vulnerability in the Windows Kernel that allows an authenticated attacker to execute arbitrary code with elevated privileges. The vulnerability requires prior local access to the system; successful exploitation results in kernel-level code execution.

Summary generated and translated by AI from the official description.
Windows Kernel Elevation of Privilege Vulnerability
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C