PULSEUnderground Intel

LIVE0signals / 24h

FEED

vulnKEV agrega CVE-2023-49105 — ownCloud / ownCloudvulnKEV agrega CVE-2026-53362 — Linux / KernelvulnKEV agrega CVE-2026-66384 — JFrog / ArtifactoryvulnKEV agrega CVE-2021-23758 — Ajax.NET Professional / Ajax.NET ProfessionalvulnKEV agrega CVE-2015-3246 — Red Hat / LibuservulnKEV agrega CVE-2015-5287 — Red Hat / Automatic Bug Reporting ToolvulnKEV agrega CVE-2022-0995 — Linux / KernelvulnKEV agrega CVE-2026-8452 — Citrix / NetScaler ADC and NetScaler GatewayvulnKEV agrega CVE-2019-1068 — Microsoft / SQL ServervulnKEV agrega CVE-2026-60004 — Gitea / GiteavulnKEV agrega CVE-2026-21962 — Oracle / HTTP Server and Oracle Weblogic Server Proxy Plug-invulnKEV agrega CVE-2026-73570 — Synacor / Zimbra Collaboration Suite (ZCS)vulnKEV agrega CVE-2026-72530 — TrueConf / ServervulnKEV agrega CVE-2026-72529 — TrueConf / ServervulnKEV agrega CVE-2023-49105 — ownCloud / ownCloudvulnKEV agrega CVE-2026-53362 — Linux / KernelvulnKEV agrega CVE-2026-66384 — JFrog / ArtifactoryvulnKEV agrega CVE-2021-23758 — Ajax.NET Professional / Ajax.NET ProfessionalvulnKEV agrega CVE-2015-3246 — Red Hat / LibuservulnKEV agrega CVE-2015-5287 — Red Hat / Automatic Bug Reporting ToolvulnKEV agrega CVE-2022-0995 — Linux / KernelvulnKEV agrega CVE-2026-8452 — Citrix / NetScaler ADC and NetScaler GatewayvulnKEV agrega CVE-2019-1068 — Microsoft / SQL ServervulnKEV agrega CVE-2026-60004 — Gitea / GiteavulnKEV agrega CVE-2026-21962 — Oracle / HTTP Server and Oracle Weblogic Server Proxy Plug-invulnKEV agrega CVE-2026-73570 — Synacor / Zimbra Collaboration Suite (ZCS)vulnKEV agrega CVE-2026-72530 — TrueConf / ServervulnKEV agrega CVE-2026-72529 — TrueConf / Server

CVE Watch—

CVE-2021-40449

Microsoft Windows Win32k Privilege Escalation Vulnerability

CVSS

—

No CVSS

EPSS

74.1%

p99

KEV

YES

Nov 17, 2021

Exploit Today

80

0-100

Published: — · Last modified: —

EPSS · 30d

74.1%EPSS · 30 days74.1%

2026-08-022026-08-31

KEV catalog record

Product

Microsoft / Windows

Vulnerability

Microsoft Windows Win32k Privilege Escalation Vulnerability

Added to KEV

Nov 17, 2021

Remediate by

Dec 1, 2021

Known ransomware use

Yes

Summary description

Unspecified vulnerability allows for an authenticated user to escalate privileges.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2021-40449

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-322024.3 MED

KEV—80Microsoft Windows Protection Mechanism Failure Vulnerability17d CVE-2026-208055.5 MED

KEV—78Microsoft Windows Information Disclosure Vulnerability32d CVE-2025-266337.0 HIG

KEV—79Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability26d CVE-2024-490398.8 HIG

KEV—79Microsoft Windows Task Scheduler Privilege Escalation Vulnerability27d CVE-2024-434618.8 HIG

KEV—80Microsoft Windows MSHTML Platform Spoofing Vulnerability21d CVE-2024-382175.4 MED

KEV—79Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability21d