+ Request intel workspace

CVE

CVE-2021-40449

P1⬤ KNOWN RANSOMWARE USE

Microsoft Windows Win32k Privilege Escalation Vulnerability

Microsoft · Windows

Date added (CISA)

2021-11-17

Remediation due

2021-12-01

Known ransomware use

Yes

Remediation priority

P1 — known ransomware use · past CISA due date

ATT&CK mapping

How this CVE is exploited or what it enables, from the CTID Mappings Explorer.

T1566exploitation T1573.001secondary impact T1071.001secondary impact T1016secondary impact T1082secondary impact T1059.003secondary impact T1027secondary impact T1068primary impact

Source: NVD ↗ · CISA KEV Catalog ↗