Rewterz Threat Advisory – CVE-2021-27077 – Microsoft Windows privilege escalation

Severity

High

Analysis Summary

CVE-2021-27077

Microsoft Windows could allow a local authenticated attacker to gain elevated privileges on the system, caused by a flaw in the Win32k component. By executing a specially-crafted program, an authenticated attacker could exploit this vulnerability to execute arbitrary code with higher privileges.

Impact

Gain Privileges

Affected Vendors

Microsoft

Affected Products

• Microsoft Windows Server 2008 SP2
• Microsoft Windows 7 SP1 x32
• Microsoft Windows 7 SP1 x64
• Microsoft Windows Server 2008 R2 SP1

Remediation

Refer to Microsoft advisory for the complete list of affected products and their respective patches.

Microsoft Security TechCenter