CVE-2021-40450

Microsoft Win32k privilege escalation vulnerability (CVE-2021-40450) was actively exploited in the wild, allowing attackers to escalate privileges on Windows systems.

This vulnerability in the Windows kernel (Win32k) allowed attackers to escalate privileges without needing prior access, directly impacting DIB systems running Windows. The fact that it was added to CISA's KEV catalog confirms it was exploited in the wild, meaning unpatched systems faced immediate risk. DIB organizations must ensure all Windows systems are patched and monitored for signs of privilege escalation.

Shame score — A core Windows kernel vulnerability was actively exploited in the wild, indicating a significant gap in Microsoft's patching or vulnerability management that left millions of systems exposed to privilege escalation.