CVE-2021-28310
Microsoft Win32k Privilege Escalation Vulnerability
Published Apr 13, 2021 · updated Jun 16, 2026 · microsoft windows 10 1803
Microsoft Windows Win32k contains an unspecified vulnerability that allows for privilege escalation.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Apr 13, 2021 · Catalog
Detected
Microsoft Windows Win32k contains an unspecified vulnerability that allows for privilege escalation.
Nov 3, 2021 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Nov 17, 2021 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
Microsoft Windows Win32k contains an unspecified vulnerability that allows for privilege escalation.
Required action
Apply updates per vendor instructions.
CISA due date Nov 17, 2021
Affected
- cpe microsoft/windows 10 1803version unspecified
- cpe microsoft/windows 10 1809version unspecified
- cpe microsoft/windows 10 1909version unspecified
- cpe microsoft/windows 10 2004version unspecified
- cpe microsoft/windows 10 20h2version unspecified
- cpe microsoft/windows server 1909version unspecified
- cpe microsoft/windows server 2004version unspecified
- cpe microsoft/windows server 2019version unspecified
- vendor Microsoft Win32kversion unspecified
Sources
- CISA KEVConfirmed exploitationCVE-2021-28310
Microsoft Windows Win32k contains an unspecified vulnerability that allows for privilege escalation.
cisa.gov - CVE.orgVulnerability recordCVE-2021-28310
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2021-28310
30-day exploitation probability 8.4%
first.org - NIST NVDVulnerability recordCVE-2021-28310
Win32k Elevation of Privilege Vulnerability
nvd.nist.gov