CVE-2021-40449

CVE-2021-40449 is a Win32k Elevation of Privilege vulnerability affecting Microsoft Windows products. It carries a high CVSS score of 7.8, indicating a local attack vector with low complexity, allowing an authenticated user to achieve full compromise of confidentiality, integrity, and availability. This vulnerability is actively exploited in the wild, including by known ransomware campaigns and state-sponsored groups like Lazarus and Chinese hackers, with a Metasploit module available. The high EPSS score, significant community discussion, and extensive media coverage further highlight its critical nature and widespread attention.