CVE-2021-27077

Windows Win32k Elevation of Privilege Vulnerability...

CVE-2021-27077

CVE-2021-27077 is a Windows Win32k Elevation of Privilege vulnerability in win32kfull.sys!BLTRECORD::bRotate. If the HOOK_PLGBLT flag is set, the code may read a surface object’s hdev and call DrvPlgBlt() on the referenced driver without verifying it implements the function, potentially leading t...

CVE-2021-27077 Windows Win32k Elevation of Privilege Vulnerability

...

KB5000809: Windows 10 Version 1803 March 2021 Security Update

The remote Windows host is missing security update 5000809. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2021-24107, CVE-2021-26869, CVE-2021-26884 - An memory...

KB5000822: Windows 10 Version 1809 and Windows Server 2019 March 2021 Security Update

The remote Windows host is missing security update 5000822. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-1640, CVE-2021-1729, CVE-2021-24095, CVE-2021-26860, CVE-2021-26862,...

KB5000807: Windows 10 March 2021 Security Update

The remote Windows host is missing security update 5000807. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-1640, CVE-2021-26862, CVE-2021-26866, CVE-2021-26868, CVE-2021-26871,...

KB5000808: Windows 10 Version 1909 March 2021 Security Update

The remote Windows host is missing security update 5000808. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-1640, CVE-2021-1729, CVE-2021-24090, CVE-2021-24095, CVE-2021-26860,...

KB5000853: Windows 8.1 and Windows Server 2012 R2 March 2021 Security Update

The remote Windows host is missing security update 5000853 or cumulative update 5000848. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...