Exploit for Out-of-bounds Write in Microsoft

CVE-2021-1732 CVE-2022-21882

githubexploit · 2022-02-15

Description

Exploit for Out-of-bounds Write in Microsoft CVE-2021-1732 Win32k Elevation Of Privilege

Affected software

Microsoft Windows 10 1803 All versions

Microsoft Windows 10 1809 All versions

Microsoft Windows 10 1909 All versions

Microsoft Windows 10 2004 All versions

All known vulnerabilities by product

Windows Windows 10 Windows 11 Windows Server 2019 Windows Server 2022

CVSS Score

7.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector:LOCAL

Attack Complexity:LOW

Privileges Required:LOW

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

98%confidence this exploit runs

Based on 3 file(s) in the source

EPSS Score

77.8%higher than 99.5% of all CVEs

Updated 2026-07-25

Exploit Details

Modified:2022-02-15 17:00

Last Seen:2025-08-31 21:11

Reporter:r1l4-i3pur1l4

Written in:C++

Last commit:2022-02-15

Tags

microsoftout-of-bounds writeCVE-2021-1732win32kelevation of privilegesprivilege escalation

Other exploits for the same CVE

Exploit for Out-of-bounds Write in Microsoft

2023-07-11 asepsaepdinGITHUB

Exploit for Out-of-bounds Write in Microsoft

2023-03-09 r2betGITHUB

Exploit for Out-of-bounds Write in Microsoft

2023-03-09 fenasalGITHUB

Exploit for Out-of-bounds Write in Microsoft

2022-11-01 ratwGITHUB

Exploit for Out-of-bounds Write in Microsoft

2022-11-01 fenalikGITHUB

Win32k ConsoleControl Offset Confusion / Privilege Escalation

2022-02-28 Spencer McIntyre, BITTER APT, LiHao, KaLendsi, MaDongZe, TuXiaoYi, JinQuan, L4ys, metasploit.comPACKETSTORMRuby

Win32k ConsoleControl Offset Confusion / Privilege Escalation Exploit

2022-02-28 metasploitZDTRuby

Win32k ConsoleControl Offset Confusion

2022-02-26 BITTER APT, JinQuan, MaDongZe, TuXiaoYi, LiHao, L4ys, KaLendsi, Spencer McIntyreMETASPLOITRuby

Exploit Code

README10 lines

## https://sploitus.com/exploit?id=25DCDCD3-A32C-5B44-B706-FFF9535ECFC2
# CVE-2021-1732

Win32k Elevation Of Privileges

Techniques inspired from:
* https://github.com/L4ys/CVE-2022-21882
* https://github.com/exploitblizzard/Windows-Privilege-Escalation-CVE-2021-1732

![](https://github.com/r1l4-i3pur1l4/CVE-2021-1732/blob/main/poc.PNG?raw=true)