CVEs-PoC/2021/CVE-2021-40449.md

### [CVE-2021-40449](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40449)
![](https://img.shields.io/static/v1?label=Product&message=Windows%2010%20Version%201507&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%2010%20Version%201607&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%2010%20Version%201809&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%2010%20Version%201909&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%2010%20Version%202004&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%2010%20Version%2020H2&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%2010%20Version%2021H1&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%2011%20version%2021H2&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%207%20Service%20Pack%201&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%207&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%208.1&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202008%20%20Service%20Pack%202&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202008%20R2%20Service%20Pack%201%20(Server%20Core%20installation)&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202008%20R2%20Service%20Pack%201&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202008%20Service%20Pack%202%20(Server%20Core%20installation)&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202008%20Service%20Pack%202&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202012%20(Server%20Core%20installation)&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202012%20R2%20(Server%20Core%20installation)&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202012%20R2&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202012&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202016%20(Server%20Core%20installation)&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202016&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202019%20(Server%20Core%20installation)&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202019&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%202022&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%20version%202004&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Windows%20Server%20version%2020H2&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=10.0.0%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=6.0.0%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=6.1.0%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=6.2.0%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=6.3.0%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Elevation%20of%20Privilege&color=brightgreen)

### Description

Win32k Elevation of Privilege Vulnerability

### POC

#### Reference
- http://packetstormsecurity.com/files/164926/Win32k-NtGdiResetDC-Use-After-Free-Local-Privilege-Escalation.html

#### Github
- https://github.com/189569400/Viper
- https://github.com/ARPSyndicate/cvemon
- https://github.com/Al1ex/WindowsElevation
- https://github.com/Ascotbe/Kernelhub
- https://github.com/Awrrays/Pentest-Tips
- https://github.com/BL0odz/CVE-2021-40449-NtGdiResetDC-UAF
- https://github.com/Classichack169/Viper
- https://github.com/CppXL/cve-2021-40449-poc
- https://github.com/Cruxer8Mech/Idk
- https://github.com/DipeshGarg/Shell-Scripts
- https://github.com/End-Satan/Viper
- https://github.com/FunnyWolf/Viper
- https://github.com/KaLendsi/CVE-2021-40449-Exploit
- https://github.com/Kristal-g/CVE-2021-40449_poc
- https://github.com/Mr-xn/Penetration_Testing_POC
- https://github.com/NaInSec/CVE-PoC-in-GitHub
- https://github.com/Ostorlab/KEV
- https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors
- https://github.com/ReJimp/Kernel_Exploit
- https://github.com/S3cur3Th1sSh1t/My-starred-Repositories
- https://github.com/S3cur3Th1sSh1t/WinPwn
- https://github.com/SYRTI/POC_to_review
- https://github.com/SamuelTulach/voidmap
- https://github.com/SultanPLX/SamuelTulach_voidmap
- https://github.com/WhooAmii/POC_to_review
- https://github.com/elinakrmova/WinPwn
- https://github.com/emtee40/win-pwn
- https://github.com/hack-parthsharma/WinPwn
- https://github.com/hakivvi/CVE-2021-40449
- https://github.com/hancp2016/news
- https://github.com/hheeyywweellccoommee/CVE-2021-40449-xarrd
- https://github.com/hktalent/bug-bounty
- https://github.com/kdandy/WinPwn
- https://github.com/lions2012/Penetration_Testing_POC
- https://github.com/ly4k/CallbackHell
- https://github.com/lyshark/Windows-exploits
- https://github.com/nomi-sec/PoC-in-GitHub
- https://github.com/pipiscrew/timeline
- https://github.com/retr0-13/WinPwn
- https://github.com/salutdamour/Kernel_Exploit
- https://github.com/soosmile/POC
- https://github.com/taielab/awesome-hacking-lists
- https://github.com/timwhitez/Git-Daily
- https://github.com/toanthang1842002/CVE-2021-40449
- https://github.com/trhacknon/Pocingit
- https://github.com/txuswashere/Cybersecurity-Handbooks
- https://github.com/win32kdie/Kernel_Exploit
- https://github.com/winterwolf32/CVE-S---Penetration_Testing_POC-
- https://github.com/xuetusummer/Penetration_Testing_POC
- https://github.com/ycdxsb/WindowsPrivilegeEscalation
- https://github.com/zecool/cve
- https://github.com/zhaoolee/garss