Microsoft Windows Win32k Privilege Escalation Vulnerability

Unspecified vulnerability allows for an authenticated user to escalate privileges.

Published 3 Oct 2026Updated 3 Oct 2026504 sources

CVSS 7.8 PoC CANDIDATE△ CISA KEV

Overview Sources History

What happened

Unspecified vulnerability allows for an authenticated user to escalate privileges.

Affected versions

Windows: See original advisory Fixed: See vendor advisory.

Why it matters

This source correlation may provide earlier visibility while structured CVE metadata is still being updated.

Detection & mitigation

Review the original advisory and validate affected versions.
Apply vendor-provided updates or mitigations when available.

Public PoC references

RepositoryAuthorFirst seenReference

SploitusWindows LPE via UAF in win32kfull GreResetDCInternal enabling SYSTEM access on Win10 Redstone.KitPloit2026-09-22T00:59:43Candidate kitploit.comWindows LPE via UAF in win32kfull GreResetDCInternal enabling SYSTEM access on Win10 Redstone.ru2026-09-22T00:59:43Candidate PoC-in-GitHub · ly4k/CallbackHellExploit for CVE-2021-40449 - Win32k Elevation of Privilege Vulnerability (LPE)★ 484ly4k2021-10-16Candidate PoC-in-GitHub · KaLendsi/CVE-2021-40449-Exploitwindows 10 14393 LPE★ 106KaLendsi2021-10-20Candidate PoC-in-GitHub · hakivvi/CVE-2021-40449LPE exploit for a UAF in Windows (CVE-2021-40449).★ 47hakivvi2021-10-25Candidate PoC-in-GitHub · Kristal-g/CVE-2021-40449_pocExploit for CVE-2021-40449★ 54Kristal-g2021-11-07Candidate PoC-in-GitHub · CppXL/cve-2021-40449-poc★ 1CppXL2021-11-12Candidate PoC-in-GitHub · BL0odz/CVE-2021-40449-NtGdiResetDC-UAF★ 11BL0odz2022-02-20Candidate PoC-in-GitHub · SamuelTulach/voidmapUsing CVE-2021-40449 to manual map kernel mode driver★ 105SamuelTulach2022-03-04Candidate

Corrections Report an issue