VulnRadar

Data against noise.

Page generated: 09 Nov 2026, 08:30 UTC

← Dashboard

CVE-2021-1732

Windows Win32k Elevation of Privilege Vulnerability

CVSS 7.8 (HIGH) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE

0.0/10

REALITY · THREAT PRIORITY

8.6/10

General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?

Recorded exploitation baseline: +7.00
Technical severity: CVSS 7.8: +1.17
Fresh EPSS: 78.38%: +0.39

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 11 documents and public datasets.

Hype components

Headline sample (25%)

0/100

Press, 30 days (60%)

0/100

Grounded branding (15%)

0/100

HYPE TOTAL0/100

Sources and documents

Unit 42

Press · 20 Jun 2023, 07:00 · Inside Win32k Exploitation: Analysis of CVE-2022-21882 and CVE-2021-1732 - Unit 42

Unit 42

Press · 13 Jun 2023, 07:00 · Inside Win32k Exploitation: Background on Implementations of Win32k and Exploitation Methodologies - Unit 42

Business Post Nigeria

Press · 15 Aug 2022, 07:00 · Meta Warns Users About Malware in Fake YouTube, WhatsApp Apps | - Business Post Nigeria

Rapid7

Press · 04 Mar 2022, 08:00 · Metasploit Weekly Wrap-Up: Mar. 4, 2022 - Rapid7

www.trendmicro.com

Press · 19 Oct 2021, 07:00 · PurpleFox Adds New Backdoor That Uses WebSockets - www.trendmicro.com

See all 11 source documents

Securelist

Press · 13 Apr 2021, 07:00 · Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310) used in the wild - Securelist

BleepingComputer

Press · 20 Feb 2021, 08:00 · Recently fixed Windows zero-day actively exploited since mid-2020 - BleepingComputer

The Hacker News

Press · 10 Feb 2021, 08:00 · Microsoft Issues Patches for In-the-Wild 0-day and 55 Others Windows Bugs - The Hacker News

thezdi.com

Press · 09 Feb 2021, 08:00 · The February 2021 Security Update Review - thezdi.com

BleepingComputer

Press · 09 Feb 2021, 08:00 · Microsoft February 2021 Patch Tuesday fixes 56 flaws, 1 zero-day - BleepingComputer

Rapid7

Press · 09 Feb 2021, 08:00 · Patch Tuesday - February 2021 - Rapid7

Score evolution

● Hype ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

First record: hype 0.0 · reality 8.6 (2026-11-02 15:12). The curve appears once the score changes.

Public exploit evidence

Public exploit entries / repo candidates

See 5 repos with metrics

Repository	Stars	Forks	Language	Updated
po4sec/CVE-2021-1732	65	15	C++	23 Apr 2021, 08:28
fenalik/CVE-2021-1732	15	9	C++	01 Nov 2022, 13:07
4dp/CVE-2021-1732	4	1	C++	09 Mar 2023, 07:15
Joe1sn/CVE_2021_1732	3	0	C++	17 Jun 2026, 02:30
flyinbedxyz/CVE-2021-1732	0	24	—	08 Mar 2021, 11:41

Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence: Exploitation recorded
Priority basis: Recorded exploitation; CVSS 7.8; EPSS 78.4%
Attention, last 30 days: 0 distinct story titles; 0 press documents; 0 publisher domains.
Technical potential: local access, low privileges, no user interaction.
Observed activity: Exploitation recorded in CISA KEV.
Known scale: Not quantified.
Evidence confidence basis: Trusted exploitation confirmation

Score evaluated: 2026-11-05 13:58:22.744333+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline

First press mention

09 Feb 2021, 08:00

Published

25 Feb 2021, 23:01

Added to the CISA KEV catalog

03 Nov 2021, 00:00

Latest press mention

20 Jun 2023, 07:00

Score calculated

05 Nov 2026, 13:58

PoCs on GitHub

5 repositories