Reference page — cumulative record through Wednesday, October 7, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2021-41357

CVE-2021-41357HIGH

Microsoft Windows 10 Version 21H1 — Win32k Elevation of Privilege Vulnerability

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  H  H  H    7.8   .0158   74.7   YES

AFFECTED
  Product                      Versions  Fixed
  Windows 10 Version 21H1      10.0.0 –  —
  Windows Server 2022          10.0.0 –  —
  Windows 10 Version 2004      10.0.0 –  —
  Windows Server version 2004  10.0.0 –  —
  Windows 10 Version 20H2      10.0.0 –  —
  Windows Server version 20H2  10.0.0 –  —
  Windows 11 version 21H2      10.0.0 –  —

TIMELINE
  Sep 17  Reserved by microsoft
  Oct 13  Published (CNA: microsoft)
  Apr 25  Added to CISA KEV, remediation due 2022-05-16

CNA: microsoft · CVSS v3.1 · 2 references · KEV due May 16, 2022

Description

Win32k Elevation of Privilege Vulnerability

Lifecycle

Complete event history — 3 events, chronological
Date	Event	Detail
September 17, 2021	Reserved	Reserved by microsoft
October 13, 2021	Published	Published (CNA: microsoft)
April 25, 2022	KEV ADDED	Added to CISA KEV, remediation due 2022-05-16

Affected

Affected products and packages — 7 rows
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
Microsoft	Windows 10 Version 21H1	—	10.0.0	—
Microsoft	Windows Server 2022	—	10.0.0	—
Microsoft	Windows 10 Version 2004	—	10.0.0	—
Microsoft	Windows Server version 2004	—	10.0.0	—
Microsoft	Windows 10 Version 20H2	—	10.0.0	—
Microsoft	Windows Server version 20H2	—	10.0.0	—
Microsoft	Windows 11 version 21H2	—	10.0.0	—

References (2)

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41357 [x_refsource_MISC]
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-41357 [government-resource]

Authoritative record: CVE-2021-41357 at cve.org

Vendors: microsoft

About this page