CVE-2021-28310

Win32k Elevation of Privilege Vulnerability...

CVE-2021-28310

creationtimestamp| type| source ---|---|--- 2021-04-13 19:42:23+00:00| exploited| https://t.me/ctinow/31796 2021-04-13 19:42:24+00:00| exploited| https://t.me/ctinow/31797 2021-04-14 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=567 2021-04-14 04:19:35+00:00| exploited|...

CVE-2021-28310 Win32k Elevation of Privilege Vulnerability

...

Patch Tuesday - April 2021

Patch Tuesday is here again and there are more Exchange updates to apply! A total of 114 vulnerabilities were fixed this month with more than half of them affecting all versions of Windows, with about half of them being remote code execution bugs, and about a fifth of them being rated as critical...

Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310) used in the wild

While analyzing the CVE-2021-1732 exploit originally discovered by the DBAPPSecurity Threat Intelligence Center and used by the BITTER APT group, we discovered another zero-day exploit we believe is linked to the same actor. We reported this new exploit to Microsoft in February and after...

CVE-2021-28310

Win32k Elevation of Privilege Vulnerability Recent assessments: ccondon-r7 at April 13, 2021 8:41pm UTC reported: Ah, another day, another Win32k privilege escalation used in the wild. Securelist has a good write-up on this bug, which they discovered because it was used in a BITTER APT zero-day...

Microsoft Win32k Elevation of Privilege (CVE-2021-28310)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...