Reference page — cumulative record through Wednesday, October 7, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2021-33771

CVE-2021-33771HIGH

Microsoft Windows 10 Version 1507 — Windows Kernel Elevation of Privilege Vulnerability

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  H  H  H    7.8   .1017   95.5   YES

AFFECTED
  Product                  Versions        Fixed
  Windows 10 Version 1507  10.0.10240.0 –  —
  Windows 10 Version 1607  10.0.14393.0 –  —
  Windows 10 Version 1809  10.0.17763.0 –  —
  Windows 10 Version 1809  10.0.0 –        —
  Windows 10 Version 1909  10.0.0 –        —
  Windows 10 Version 2004  10.0.0 –        —
  Windows 10 Version 20H2  10.0.0 –        —
  Windows 10 Version 21H1  10.0.0 –        —
  Windows 8.1              6.3.0 –         —
  Windows Server 2012 R2   6.3.9600.0 –    —
  + 7 more

TIMELINE
  May 28  Reserved by microsoft
  Nov 3   Added to CISA KEV, remediation due 2021-11-17
  Nov 3   Published (CNA: microsoft)

CNA: microsoft · CVSS v3.1 · 3 references · NVD status: Analyzed · KEV due November 17, 2021

Description

Windows Kernel Elevation of Privilege Vulnerability

Lifecycle

Complete event history — 3 events, chronological
Date	Event	Detail
May 28, 2021	Reserved	Reserved by microsoft
November 3, 2021	KEV ADDED	Added to CISA KEV, remediation due 2021-11-17
November 3, 2021	Published	Published (CNA: microsoft)

Affected

Affected products and packages — 17 rows
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
Microsoft	Windows 10 Version 1507	—	10.0.10240.0	—
Microsoft	Windows 10 Version 1607	—	10.0.14393.0	—
Microsoft	Windows 10 Version 1809	—	10.0.17763.0	—
Microsoft	Windows 10 Version 1809	—	10.0.0	—
Microsoft	Windows 10 Version 1909	—	10.0.0	—
Microsoft	Windows 10 Version 2004	—	10.0.0	—
Microsoft	Windows 10 Version 20H2	—	10.0.0	—
Microsoft	Windows 10 Version 21H1	—	10.0.0	—
Microsoft	Windows 8.1	—	6.3.0	—
Microsoft	Windows Server 2012 R2	—	6.3.9600.0	—
Microsoft	Windows Server 2012 R2 (Server Core installation)	—	6.3.9600.0	—
Microsoft	Windows Server 2016	—	10.0.14393.0	—
Microsoft	Windows Server 2016 (Server Core installation)	—	10.0.14393.0	—
Microsoft	Windows Server 2019	—	10.0.17763.0	—
Microsoft	Windows Server 2019 (Server Core installation)	—	10.0.17763.0	—
Microsoft	Windows Server version 2004	—	10.0.0	—
Microsoft	Windows Server version 20H2	—	10.0.0	—

References (3)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-33771 [Patch, Vendor Advisory]
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33771 [Patch, Vendor Advisory]
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-33771 [US Government Resource]

Authoritative record: CVE-2021-33771 at cve.org

Vendors: microsoft

About this page