Actively exploited in the wild

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft - Win32k · Listed in the CISA KEV since 2021-11-03. This indicates confirmed attacks in production environments.

Required action: Apply updates per vendor instructions.

CVE-2021-1732

HighCVSS 7.8KEV

Published: 25/02/2021(UTC)Updated: 12/08/2026(UTC)Translated: 12/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

77.76%

100th percentile - higher than 100% of all known CVEs

Summary

A vulnerability in the Win32k component of Windows allows elevation of privilege. An attacker could exploit it to gain higher privileges on the system.

Risk Assessment

Risk of unauthorized user gaining control over the system.

Recommendation

Install the latest Windows security updates.

Original NVD description (English source)

Windows Win32k Elevation of Privilege Vulnerability