{"metadata": {"vulnerability": "CVE-2021-1732", "count": 97, "kinds": {"milestone": 5, "sighting": 62, "kev": 11, "other": 19}, "linked_omitted": 0}, "data": [{"timestamp": "2020-12-02T00:00:00Z", "date_only": false, "value": "2020-12-02T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-1732", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-02-04T00:00:00Z", "date_only": false, "value": "2021-02-04T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-1732", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2021-02-04T00:00:00Z", "date_only": false, "value": "2021-02-04T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-1732", "record": "FKIE_CVE-2021-1732", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2021-02-09T08:00:00Z", "date_only": false, "value": "2021-02-09T08:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2021-1732", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-02-10T00:00:00Z", "date_only": false, "value": "2021-02-10T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-105", "record": "CERTFR-2021-AVI-105", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2021-02-10T04:00:00Z", "date_only": false, "value": "2021-02-10T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=550", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "83f5f633-96bf-4438-ad4f-f0a8dedba3bd", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=550"}, {"timestamp": "2021-02-10T09:42:00Z", "date_only": false, "value": "2021-02-10T09:42:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/1419", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "a7ed0425-3b5d-4e4d-a451-bdce8c4bc776", "content": "\u0427\u0443\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 \u0441\u0443\u0442\u043e\u043a \u043d\u0430\u0437\u0430\u0434 Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432. \u0412\u0441\u0435\u0433\u043e \u0431\u044b\u043b\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 56 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, 11 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u043c\u0438.\n\n\u0412 \u0447\u0438\u0441\u043b\u0435 \u0434\u0440\u0443\u0433\u0438\u0445 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 CVE-2021-1732, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u0432 \u044f\u0434\u0440\u0435 Windows \u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u0430 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044f\u0432\u043b\u044f\u043b\u0430\u0441\u044c 0-day \u0438 \u043a\u0430\u0441\u0430\u043b\u0430\u0441\u044c \u0432\u0441\u0435\u0445 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 Windows 10.\n\n\u0410 \u0443\u0436\u0435 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u043d\u043e\u0447\u044c\u044e \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f \u0438\u043d\u0444\u043e\u0441\u0435\u043a \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f DBAPPSecurity \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0438\u043c\u0435\u043d\u043d\u043e \u0435\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2020 \u0433\u043e\u0434\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 CVE-2021-1732 \u0438 \u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 APT Bitter \u0432 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u0422\u0430\u043a\u0436\u0435 \u043a\u0438\u0442\u0430\u0439\u0446\u044b \u0434\u0430\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u0438 \u043f\u0440\u0438\u0432\u0435\u043b\u0438 PoC. \u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 - \"\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0430 \u0432\u044b\u0441\u043e\u043a\u043e\u043a\u0432\u0430\u043b\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438, \u0430 \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0432\u0435\u0441\u044c\u043c\u0430 \u0441\u043b\u043e\u0436\u0435\u043d\". \n\nAPT Bitter - \u044d\u0442\u043e \u0430\u0437\u0438\u0430\u0442\u0441\u043a\u0430\u044f \u043f\u0440\u043e\u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u0430\u044f \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0430\u044f \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043f\u043e \u041f\u0430\u043a\u0438\u0441\u0442\u0430\u043d\u0443 \u0438 \u041a\u0438\u0442\u0430\u044e. \u0418\u0441\u0445\u043e\u0434\u044f \u0438\u0437 \u0442\u0430\u043a\u043e\u0433\u043e \u043d\u0430\u0431\u043e\u0440\u0430 \u0446\u0435\u043b\u0435\u0439, \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u044c, \u0447\u0442\u043e \u0437\u0430 \u043d\u0435\u0439 \u0441\u0442\u043e\u0438\u0442 \u0418\u043d\u0434\u0438\u044f.", "url": "https://t.me/true_secator/1419", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2021-02-15T11:00:19Z", "date_only": false, "value": "2021-02-15T11:00:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/2708", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "be982a0e-d610-4ae1-93ca-5277e925f463", "content": "#Analytics\n10 most exploited vulnerabilities of the week (feb 8-14)\nCVE-2020-1472 - Microsoft Zerologon\nhttps://t.me/cybersecuritytechnologies/1742\nCVE-2021-3156 - Heap-Based Buffer Overflow in Sudo\nhttps://t.me/cybersecuritytechnologies/2577\nCVE-2021-1732 - Windows kernel 0-day exploit is used by BITTER APT in targeted attack\nhttps://t.me/cybersecuritytechnologies/2679\nCVE-2020-2037 - Palo Alto PAN-OS vulnerability\nhttps://t.me/cybersecuritytechnologies/2687\nCVE-2021-24074, CVE-2021-24086, CVE-2021-24094 - Windows IPv4/IPv6 Stack RCE/DoS Vulnerabilities\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\nCVE-2021-1782 - iOS\\iPadOS 14.3 kernel LPE vulnerability\nhttps://t.me/cybersecuritytechnologies/2694\nCVE-2021-21017 - Acrobat Reader DC\u00a0a heap-based buffer overflow vulnerability\nhttps://threatpost.com/critical-adobe-windows-flaw/163789\nCVE-2020-24581 - D-Link DSL-2888A AU_2.31_V1x - RCE\nhttps://t.me/cybersecuritytechnologies/2670", "url": "https://t.me/CyberSecurityTechnologies/2708"}, {"timestamp": "2021-02-19T11:58:26Z", "date_only": false, "value": "2021-02-19T11:58:26.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/orderofsixangles/1269", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "c1063cba-fe3b-44a9-9ae5-fb5f9e5aa27c", "content": "WINDOWS KERNEL ZERO-DAY EXPLOIT (CVE-2021-1732) IS USED BY BITTER APT IN TARGETED ATTACK\n\nhttps://ti.dbappsecurity.com.cn/blog/index.php/2021/02/10/windows-kernel-zero-day-exploit-is-used-by-bitter-apt-in-targeted-attack/", "url": "https://t.me/orderofsixangles/1269", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2021-02-20T17:12:19Z", "date_only": false, "value": "2021-02-20T17:12:19.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cKure/4024", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "fe6b789b-d588-4d68-9775-17eb091c1ccd", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 CVE-2021-1732: Microsoft says that a high-severity Windows zero-day vulnerability\u00a0patched during the February 2021 Patch Tuesday was exploited in the wild since at least the summer of 2020 according to its\u00a0telemetry data.\n\nhttps://www.bleepingcomputer.com/news/security/recently-fixed-windows-zero-day-actively-exploited-since-mid-2020/", "url": "https://t.me/cKure/4024", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2021-02-22T14:45:11Z", "date_only": false, "value": "2021-02-22T14:45:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/2759", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "1e8cd540-645e-450f-bc9e-146bf91eb685", "content": "#Analytics\n10 most exploited vulnerabilities of the week (feb 15-21)\nCVE-2021-3156 - Heap-Based Buffer Overflow in Sudo\nhttps://t.me/cybersecuritytechnologies/2577\nCVE-2021-1732 - Windows kernel 0-day exploit is used by BITTER APT\nhttps://t.me/cybersecuritytechnologies/2679\nCVE-2021-1647 - MS Defender RCE Vulnerability\nhttps://www.anquanke.com/post/id/231625\nCVE-2020-10759 - Dazed Blesbok\nhttps://t.me/cybersecuritytechnologies/1243\nCVE-2021-21976 - VMware Post-Auth RCE in vSphere Replication\nCVE-2021-3177 - Python 3 Buffer Overflow\nhttps://t.me/cybersecuritytechnologies/2740\nCVE-2020-8625 - A vulnerability in BIND's GSSAPI\nhttps://kb.isc.org/docs/cve-2020-8625\nCVE-2021-20655\nhttps://jvn.jp/en/jp/JVN58774946/index.html\nCVE-2021-1366 - A vulnerability in the interprocess communication channel of Cisco AnyConnect Secure Client\nhttps://www.coresecurity.com/core-labs/articles/analysis-cisco-anyconnect-posture-hostscan-local-privilege-escalation-cve-2021", "url": "https://t.me/CyberSecurityTechnologies/2759"}, {"timestamp": "2021-02-25T23:01:31Z", "date_only": false, "value": "2021-02-25T23:01:31.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-1732", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-02-25T23:15:00Z", "date_only": false, "value": "2021-02-25T23:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-GVWR-5HRC-2GR5", "record": "GHSA-GVWR-5HRC-2GR5", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2021-02-25T23:15:13.930Z", "date_only": false, "value": "2021-02-25T23:15:13.930", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-1732", "record": "FKIE_CVE-2021-1732", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2021-02-25T23:15:13.930Z", "date_only": false, "value": "2021-02-25T23:15:13.930", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2021-1732", "record": "GSD-2021-1732", "field": "namespaces.nvd.nist.gov.cve.published", "linked_record": true}, {"timestamp": "2021-02-26T00:00:00Z", "date_only": true, "value": "2021-02-26", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2021-17745", "record": "CNVD-2021-17745", "field": "submitTime", "linked_record": true}, {"timestamp": "2021-03-03T05:37:03Z", "date_only": false, "value": "2021-03-03T05:37:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/2815", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "9150dccf-49eb-4c93-9602-ab52938cb95b", "content": "#Analytics\nTop 10 Most Used Vulnerabilities of the Month (feb 1-28)\nCVE-2021-3156 - Heap-Based Buffer Overflow in Sudo\nhttps://t.me/cybersecuritytechnologies/2577\nCVE-2021-21972 - VMware vCenter RCE\nhttps://swarm.ptsecurity.com/unauth-rce-vmware/#more-2477\nhttps://github.com/QmF0c3UK/CVE-2021-21972-vCenter-6.5-7.0-RCE-POC\nhttps://github.com/NS-Sp4ce/CVE-2021-21972\nhttps://github.com/yaunsky/CVE-2021-21972\nCVE-2021-1732 - Windows kernel 0-day exploit is used by BITTER APT\nhttps://t.me/cybersecuritytechnologies/2679\nCVE-2021-1782 - iOS\\iPadOS 14.3 kernel LPE\nhttps://t.me/cybersecuritytechnologies/2694\nCVE-2021-25646 - Apache Druid <=0.20.1 RCE\nhttps://t.me/cybersecuritytechnologies/2639\nCVE-2020-27932 - A type confusion in MacOS 10.15.7\nhttps://t.me/cybersecuritytechnologies/2383\nCVE-2021-24074, CVE-2021-24094, CVE-2021-24086 - Windows IPv4/IPv6 Stack RCE/DoS Vulnerabilities\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday", "url": "https://t.me/CyberSecurityTechnologies/2815"}, {"timestamp": "2021-03-09T21:01:58Z", "date_only": false, "value": "2021-03-09T21:01:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reconshell/534", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "d896e078-a309-4e46-9732-7dc7778fed4b", "content": "CVE-2021-1732 Microsoft Windows 10 Privilege Escalation\n\n#CVE-2021-1732 #PrivilegeEscalation #Exploit #InfoSec\n#Hacking #CyberSecurity #cve #windows\n\nhttps://reconshell.com/cve-2021-1732-microsoft-windows-10-privilege-escalation/", "url": "https://t.me/reconshell/534", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2021-03-15T04:50:46Z", "date_only": false, "value": "2021-03-15T04:50:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/infobes/295", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "be82827e-7195-4d80-9efa-9ee9d85ff58f", "content": "#Analytics\n10 most exploited vulnerabilities of the week (march 8 - 14)\nCVE-2021-26855, CVE-2021-27065 - ProxyLogon MS Exchange Server RCE Vulnerability\nhttps://t.me/cybersecuritytechnologies/2835\nCVE-2021-1732 - Windows kernel 0-day exploit\nhttps://t.me/cybersecuritytechnologies/2679\nCVE-2021-22986, CVE-2021-22987 - F5 BIG-IP TMM uri_normalize_host infoleak and out-of-bounds write\nhttps://t.me/cybersecuritytechnologies/2881\nCVE-2021-21193 - Google Chrome Blink code execution\nhttps://vulmon.com/vulnerabilitydetails?qid=CVE-2021-21193\nCVE-2021-21978 - VMware View Planner\u00a0RCE\nhttps://mobile.twitter.com/osama_hroot/status/1367258907601698816\nhttps://paper.seebug.org/1495\nCVE-2021-21300 - Git vulnerability\nhttps://t.me/cybersecuritytechnologies/2880\nCVE-2021-26411 - IE mshtml use-after-free\nhttps://t.me/cybersecuritytechnologies/2908", "url": "https://t.me/infobes/295", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2021-03-15T11:00:37Z", "date_only": false, "value": "2021-03-15T11:00:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/2911", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "976952b1-675e-4168-b954-74dc644f1844", "content": "#Analytics\n10 most exploited vulnerabilities of the week (march 8 - 14)\nCVE-2021-26855, CVE-2021-27065 - ProxyLogon MS Exchange Server RCE Vulnerability\nhttps://t.me/cybersecuritytechnologies/2835\nCVE-2021-1732 - Windows kernel 0-day exploit\nhttps://t.me/cybersecuritytechnologies/2679\nCVE-2021-22986, CVE-2021-22987 - F5 BIG-IP TMM uri_normalize_host infoleak and out-of-bounds write\nhttps://t.me/cybersecuritytechnologies/2881\nCVE-2021-21193 - Google Chrome Blink code execution\nhttps://vulmon.com/vulnerabilitydetails?qid=CVE-2021-21193\nCVE-2021-21978 - VMware View Planner\u00a0RCE\nhttps://mobile.twitter.com/osama_hroot/status/1367258907601698816\nhttps://paper.seebug.org/1495\nCVE-2021-21300 - Git vulnerability\nhttps://t.me/cybersecuritytechnologies/2880\nCVE-2021-26411 - IE mshtml use-after-free\nhttps://t.me/cybersecuritytechnologies/2908", "url": "https://t.me/CyberSecurityTechnologies/2911", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2021-03-16T00:00:00Z", "date_only": true, "value": "2021-03-16", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2021-17745", "record": "CNVD-2021-17745", "field": "openTime", "linked_record": true}, {"timestamp": "2021-03-20T14:08:15Z", "date_only": false, "value": "2021-03-20T14:08:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/hn4EqhtjYBF3uW2imvaMvPSRNA6Id6rUWGxMt_qX0IYHBA", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "8493a4ba-e60e-4d85-a954-e804f45912b4", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2021-03-29T03:08:41Z", "date_only": false, "value": "2021-03-29T03:08:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/infobes/305", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "a38128a3-5907-4517-8562-5940275a68ab", "content": "#Analytics\n10 most exploited vulnerabilities of the week (march 22-28)\nCVE-2021-26855 - ProxyLogon MS Exchange Server RCE\nhttps://t.me/cybersecuritytechnologies/2835\nCVE-2021-22986/22987 - F5 BIG-IP TMM uri_normalize_host infoleak/out-of-bounds write\nhttps://t.me/cybersecuritytechnologies/2881\nCVE-2021-1732 - Windows kernel 0-day exploit\nhttps://t.me/cybersecuritytechnologies/2679\nCVE-2021-3449/3450 - OpenSSL DoS/certificate validation\nhttps://t.me/cybersecuritytechnologies/2993\nhttps://thehackernews.com/2021/03/openssl-releases-patches-for-2-high.html?m=1#click=https://t.co/z6FHjamuUy\nCVE-2021-26295 - Apache OFBiz unsafe deserialization\nhttps://t.me/cybersecuritytechnologies/2978\nCVE-2020-14179 - JIRA Information Disclosure\nhttps://t.me/cybersecuritytechnologies/2581\nCVE-2020-17453 - XSS In WSO2 Carbon Mgmnt Console\nhttps://t.me/cybersecuritytechnologies/3006\nCVE-2021-21087 - Adobe ColdFusion RCE\nhttps://www.bleepingcomputer.com/news/security/critical-code-execution-vulnerability-fixed-in-adobe-coldfusion", "url": "https://t.me/infobes/305", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2021-04-24T07:47:59Z", "date_only": false, "value": "2021-04-24T07:47:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/5037", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "f7cd98ec-fac6-4600-9560-d89f17437710", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 CVE-2021-1732 (Proof of Concept)\n\nhttps://github.com/Pai-Po/CVE-2021-1732", "url": "https://t.me/cKure/5037", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2021-04-26T11:02:21Z", "date_only": false, "value": "2021-04-26T11:02:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/3219", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "f01e0f91-c1e0-4728-8b6c-e1ad4bb67c57", "content": "#Analytics\n10 most exploited vulnerabilities of the week (April 19-25)\nCVE-2021-3156 Heap-Based Buffer Overflow in Sudo\nhttps://t.me/cybersecuritytechnologies/2577\nCVE-2021-1732 Win kernel 0-day\nhttps://t.me/cybersecuritytechnologies/2679\nCVE-2021-22893 Pulse SecureVPN RCE\nhttps://t.me/cybersecuritytechnologies/3185\nCVE-2021-22204 Improper neutralization of user data in DjVu\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\nCVE-2021-26415 Win Installer EoP\nhttps://t.me/cybersecuritytechnologies/3186\nCVE-2021-3493 OverlayFS PE\nhttps://t.me/cybersecuritytechnologies/3164\nCVE-2021-26413 Win Installer Spoofing\nhttps://t.me/cybersecuritytechnologies/3176\nCVE-2016-7836 SKYSEA Client View Arbitrary Code Exec\nhttps://www.virusbulletin.com/virusbulletin/2020/05/vb2019-paper-apt-cases-exploiting-vulnerabilities-regionspecific-software\nCVE-2021-27905 Apache Solr SSRF\nhttps://t.me/cybersecuritytechnologies/3213", "url": "https://t.me/CyberSecurityTechnologies/3219"}, {"timestamp": "2021-04-29T08:36:00Z", "date_only": false, "value": "2021-04-29T08:36:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/RalfHackerChannel/1013", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "91d8939d-0293-4cd0-a497-bda786369c66", "content": "\u0414\u0430, \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b \u043e\u0442 \u043f\u043e\u0434\u043f\u0438\u0441\u0447\u0438\u043a\u043e\u0432 \u043f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442\u0441\u044f!!\n\nhttps://github.com/Al1ex/WindowsElevation/tree/master/CVE-2021-1732\n\n\"\u0420\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0445\u043e\u0440\u043e\u0448\u043e, \n\u043f\u0440\u043e\u0431\u043e\u0432\u0430\u043b \u0441\u0432\u044f\u0437\u0430\u0442\u044c \u0441 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u043e\u0439 + \u043a\u0440\u0438\u043f\u0442 \n\u0417\u0431\u0441\"\n\n#git", "url": "https://t.me/RalfHackerChannel/1013", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2021-09-21T06:42:55Z", "date_only": false, "value": "2021-09-21T06:42:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/pwnwiki_zhchannel/35", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "135b3cd7-86e7-4b47-87cb-1d9420dd29aa", "content": "CVE-2021-1732 Windows Win32k \u672c\u5730\u63d0\u6b0a\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-1732_Windows_Win32k_%E6%9C%AC%E5%9C%B0%E6%8F%90%E6%AC%8A%E6%BC%8F%E6%B4%9E", "url": "https://t.me/pwnwiki_zhchannel/35", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2021-1732", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "a57b872c-aea7-4dc5-b9c6-f7a429b8887b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2021-1732", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "1be30167-a6bb-4d2a-8d2a-03efa2f8587f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-1732", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2021-1732", "record": "GSD-2021-1732", "field": "namespaces.cisa.gov.dateAdded", "linked_record": true}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2021-1732", "field": "evidence.0.details.added_date", "uuid": "1be30167-a6bb-4d2a-8d2a-03efa2f8587f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2021-1732", "field": "evidence.0.details.date_added", "uuid": "a57b872c-aea7-4dc5-b9c6-f7a429b8887b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2021-1732", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "a57b872c-aea7-4dc5-b9c6-f7a429b8887b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2021-1732", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "1be30167-a6bb-4d2a-8d2a-03efa2f8587f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2021-1732", "field": "status.status_updated_at", "uuid": "a57b872c-aea7-4dc5-b9c6-f7a429b8887b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2021-1732", "field": "status.status_updated_at", "uuid": "1be30167-a6bb-4d2a-8d2a-03efa2f8587f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-1732", "field": "containers.adp.1.timeline.0.time", "text": "CVE-2021-1732 added to CISA KEV"}, {"timestamp": "2021-11-08T08:58:18Z", "date_only": false, "value": "2021-11-08T08:58:18.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "d01c1389-f0fd-41c6-84b9-2de090c6380b"}, {"timestamp": "2021-11-16T16:22:32Z", "date_only": false, "value": "2021-11-16T16:22:32.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ckuRED/59", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "5797d37e-0230-4310-a8a7-f00159700bd8", "content": "Pakistan \ud83c\uddf5\ud83c\uddf0 | Zero-Day | Cyber-War: The 32bit version of CVE-2021-1732 was recently uploaded to Virus Total from Pakistan. The 0-day exploit was used by Bitter APT and developed by the US-based offensive company Exodus Intelligence (aka \u201cMoses\u201d).\n\nhttps://www.virustotal.com/gui/file/ee2d53303e2c5a2787dad11e3a0abce5ea0ff9a4219e963e69a4054a11efc628\n\nSource: CP-Research", "url": "https://t.me/ckuRED/59", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2021-11-16T16:22:42Z", "date_only": false, "value": "2021-11-16T16:22:42.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cKure/8066", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "4a04951a-71ff-4846-b6b4-42752673e4b1", "content": "Pakistan \ud83c\uddf5\ud83c\uddf0 | Zero-Day | Cyber-War: The 32bit version of CVE-2021-1732 was recently uploaded to Virus Total from Pakistan. The 0-day exploit was used by Bitter APT and developed by the US-based offensive company Exodus Intelligence (aka \u201cMoses\u201d).\n\nhttps://www.virustotal.com/gui/file/ee2d53303e2c5a2787dad11e3a0abce5ea0ff9a4219e963e69a4054a11efc628\n\nSource: CP-Research", "url": "https://t.me/cKure/8066", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2021-11-17T00:00:00Z", "date_only": true, "value": "2021-11-17", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2021-1732", "field": "evidence.0.details.due_date", "uuid": "a57b872c-aea7-4dc5-b9c6-f7a429b8887b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-17T00:00:00Z", "date_only": true, "value": "2021-11-17", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2021-1732", "record": "GSD-2021-1732", "field": "namespaces.cisa.gov.dueDate", "linked_record": true}, {"timestamp": "2021-11-20T09:53:52Z", "date_only": false, "value": "2021-11-20T09:53:52.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "aa43a3ee-a7e7-41ec-94ab-af24fe29e12d"}, {"timestamp": "2022-01-05T22:34:26Z", "date_only": false, "value": "2022-01-05T22:34:26.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/FfPIxdPyjBiUDhNNcRj-n9-EuZtgku9viGhLClinR3ejLTdr", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "018d5d23-965d-4e31-bd77-63a56c1d2ab8"}, {"timestamp": "2022-01-28T12:07:13Z", "date_only": false, "value": "2022-01-28T12:07:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/5293", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "8ddea511-8ffa-4a81-888c-f8783fee0d9d", "content": "#exploit\n1. CVE-2022-21882:\nwin32k LPE bypass CVE-2021-1732\nhttps://github.com/KaLendsi/CVE-2022-21882\n// tested on windows 20h2 19042\n\n2. Technical Analysis of CVE-2022-22583:\nBypassing macOS System Integrity Protection (SIP)\nhttps://perception-point.io/technical-analysis-of-cve-2022-22583-bypassing-macos-system-integrity-protection", "url": "https://t.me/CyberSecurityTechnologies/5293"}, {"timestamp": "2022-01-31T17:10:00Z", "date_only": false, "value": "2022-01-31T17:10:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/2574", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "46f9bc71-bf3d-47b1-8751-b010f59617f4", "content": "\u041c\u044b \u0443\u0436\u0435 \u043f\u0438\u0441\u0430\u043b\u0438 \u043e \u0442\u043e\u043c, \u043a\u0430\u043a \u043a\u043b\u0438\u0435\u043d\u0442\u044b Microsoft \u0441\u0442\u0430\u043b\u0438 \u0437\u0430\u043b\u043e\u0436\u043d\u0438\u043a\u0430\u043c\u0438 \u0442\u0440\u0443\u0434\u043d\u043e\u0433\u043e \u0432\u044b\u0431\u043e\u0440\u0430: \u043d\u0430\u043a\u0430\u0442\u0438\u0442\u044c \u044f\u043d\u0432\u0430\u0440\u0441\u043a\u0438\u0439 PatchTuesday (\u0438 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u0442\u044c\u0441\u044f \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 L2TP, VPN, ReFS \u0438 Hyper-V) \u0438\u043b\u0438 \u0436\u0435 \u043e\u0442\u043a\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u043a \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438. \u0410 \u0432\u044b\u0431\u043e\u0440 \u0432\u0441\u0435 \u0436\u0438 \u043f\u0440\u0438\u0434\u0435\u0442\u0441\u044f \u0441\u0434\u0435\u043b\u0430\u0442\u044c.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u00a0RyeLv \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 CVE-2022-21882, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432 Windows 10 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 Win32k.sys.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Win32k \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u044f\u043d\u0432\u0430\u0440\u0441\u043a\u0438\u043c PatchTuesday \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0430 \u0441\u043e\u0431\u043e\u0439 \u043e\u0431\u0445\u043e\u0434\u0430 \u0440\u0430\u043d\u0435\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\u00a0CVE-2021-1732. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443 \u043c\u043e\u0433\u0443\u0442 \u043b\u0435\u0433\u043a\u043e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043c\u043e\u0447\u044c \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c\u0441\u044f \u043f\u043e \u0441\u0435\u0442\u0438, \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\n\u0420\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0443\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u0432, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CERT/CC \u0423\u0438\u043b\u043b \u0414\u043e\u0440\u043c\u0430\u043d\u043d.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0430\u043d\u0435\u0435 \u0443\u0436\u0435 \u043f\u043e\u043f\u0430\u0434\u0430\u043b\u0430 \u0432 \u043f\u043e\u043b\u0435 \u0437\u0440\u0435\u043d\u0438\u044f \u0438\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0414\u0436\u0438\u043b\u0430 \u0414\u0430\u0431\u0430\u0445\u0430, \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0430\u00a0Piiano, \u0440\u0435\u0448\u0438\u0432\u0448\u0438\u043c \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0443\u00a0\u043f\u043e\u0441\u043b\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f Microsoft \u0443\u043c\u0435\u043d\u044c\u0448\u0438\u0442\u044c \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u044f\u00a0\u043f\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u044f \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043e\u043a. \u0418 \u044d\u0442\u043e \u0432\u0441\u0435 \u043f\u0440\u0438 \u0442\u043e\u043c, \u0447\u0442\u043e CVE-2021-1732 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c APT Bitter (\u0430\u0437\u0438\u0430\u0442\u0441\u043a\u0430\u044f \u043f\u0440\u043e\u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u0430\u044f \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0430\u044f \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043f\u043e \u041f\u0430\u043a\u0438\u0441\u0442\u0430\u043d\u0443 \u0438 \u041a\u0438\u0442\u0430\u044e, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0441\u0442\u043e\u0438\u0442 \u0418\u043d\u0434\u0438\u044f) \u0432 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c, \u043d\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0432\u0448\u0438\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0437\u0430 \u044f\u043d\u0432\u0430\u0440\u044c 2022 \u0433\u043e\u0434\u0430, \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u044d\u0442\u043e \u043f\u043e\u0441\u043a\u043e\u0440\u0435\u0435, \u043f\u043e\u043c\u043d\u044f \u0438\u0441\u0442\u043e\u0440\u0438\u044e \u043f\u0440\u0435\u0434\u0448\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u0438\u043a\u0430 CVE-2022-21882.", "url": "https://t.me/true_secator/2574", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2022-02-25T22:15:27Z", "date_only": false, "value": "2022-02-25T22:15:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve_2022_21882_win32k.rb", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "19d6fdcb-09f9-44be-b5e2-10042a8f9845", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve_2022_21882_win32k.rb"}, {"timestamp": "2022-05-24T17:43:11Z", "date_only": false, "value": "2022-05-24T17:43:11Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GVWR-5HRC-2GR5", "record": "GHSA-GVWR-5HRC-2GR5", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-05-26T04:37:35Z", "date_only": false, "value": "2022-05-26T04:37:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/3546", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "db65602b-f3a1-4e5b-b10c-ab6fb60fca44", "content": "#Whitepaper\n\"Windows Win32k Elevation Of Privilege Vulnerability\", 2021.\n\n// Whitepaper called Windows Win32k EoP Vulnerability. It details exploitation and an overview of CVE-2021-1732", "url": "https://t.me/CyberSecurityTechnologies/3546", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-06-01T02:33:44Z", "date_only": false, "value": "2022-06-01T02:33:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/3007", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "a9a937d0-7caf-4ce4-adcc-e6a51a0af57f", "content": "#Analytics\n10 most exploited vulnerabilities of the week (march 22-28)\nCVE-2021-26855 - ProxyLogon MS Exchange Server RCE\nhttps://t.me/cybersecuritytechnologies/2835\nCVE-2021-22986/22987 - F5 BIG-IP TMM uri_normalize_host infoleak/out-of-bounds write\nhttps://t.me/cybersecuritytechnologies/2881\nCVE-2021-1732 - Windows kernel 0-day exploit\nhttps://t.me/cybersecuritytechnologies/2679\nCVE-2021-3449/3450 - OpenSSL DoS/certificate validation\nhttps://t.me/cybersecuritytechnologies/2993\nhttps://thehackernews.com/2021/03/openssl-releases-patches-for-2-high.html\nCVE-2021-26295 - Apache OFBiz unsafe deserialization\nhttps://t.me/cybersecuritytechnologies/2978\nCVE-2020-14179 - JIRA Information Disclosure\nhttps://t.me/cybersecuritytechnologies/2581\nCVE-2020-17453 - XSS In WSO2 Carbon Mgmnt Console\nhttps://t.me/cybersecuritytechnologies/3006\nCVE-2021-21087 - Adobe ColdFusion RCE\nhttps://www.bleepingcomputer.com/news/security/critical-code-execution-vulnerability-fixed-in-adobe-coldfusion", "url": "https://t.me/CyberSecurityTechnologies/3007"}, {"timestamp": "2022-07-04T20:00:05Z", "date_only": false, "value": "2022-07-04T20:00:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/3129", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "432ed35c-27d1-42f8-a277-9e943b6bd597", "content": "\u041d\u0430\u0441\u0442\u0443\u043f\u0430\u0442\u044c \u043d\u0430 \u0442\u0435 \u0436\u0435 \u0433\u0440\u0430\u0431\u043b\u0438 \u0432 \u043c\u0438\u0440\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 - \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u0430\u044f \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430, \u0430 \u201c\u043b\u0430\u0442\u0430\u0442\u044c \u0434\u044b\u0440\u044b\u201d \u043f\u043e\u0440\u043e\u0439, \u0441\u0442\u043e\u0438\u0442 \u0431\u043e\u043b\u0435\u0435 \u043e\u0441\u043d\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e. \n\n\u0421\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043e \u0447\u0435\u043c \u0440\u0435\u0447\u044c, \u0430 \u0432\u043e\u0442 \u043e \u0447\u0435\u043c: \u043f\u043e \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c \u0430\u043d\u0430\u043b\u0438\u0437\u0430 Google Project Zero \u0437\u0430 \u043f\u0435\u0440\u0432\u0443\u044e \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u0443 2022 \u0433\u043e\u0434\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 18 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u0430 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0438\u0437-\u0437\u0430 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u043d\u0435 \u0431\u044b\u043b\u0438 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u0430 \u041c\u044d\u0434\u0434\u0438 \u0421\u0442\u043e\u0443\u043d\u0430 9 \u0438\u0437 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 0-day, \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0432\u0448\u0438\u0445\u0441\u044f \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443, \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c, \u0435\u0441\u043b\u0438 \u0431\u044b \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0430 4 \u043e\u0448\u0438\u0431\u043a\u0438 2022 \u0433\u043e\u0434\u0430 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0430\u043c\u0438 \u043d\u0443\u043b\u0435\u0432\u044b\u0445 \u0434\u043d\u0435\u0439 2021 \u0433\u043e\u0434\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u0421\u0430\u043c\u0430\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0438\u0437 \u044d\u0442\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Follina \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Windows, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2022-30190, \u043f\u043e \u0441\u0443\u0442\u0438 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f MSHTML, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0439 \u043a\u0430\u043a CVE-2021-40444.\n\nCVE-2022-21882 \u2014 \u044d\u0442\u043e \u0435\u0449\u0435 \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Windows, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u043e\u0431\u043e\u0439 \u0440\u0430\u0437\u043d\u043e\u0432\u0438\u0434\u043d\u043e\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443, \u0430 \u0438\u043c\u0435\u043d\u043d\u043e CVE-2021-1732 .\n\n\u041e\u0448\u0438\u0431\u043a\u0430 iOS IOMobileFrameBuffer (CVE-2022-22587) \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0435\u0439 \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 Chrome V8 (CVE-2022-1096) \u2014 \u044d\u0442\u043e \u0434\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0430\u043c\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u2014 CVE-2021-30983 \u0438 CVE-2021-30551 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e.\n\n\u0414\u0440\u0443\u0433\u0438\u043c\u0438 0-day 2022 \u0433\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0430\u043c\u0438 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f CVE-2022-1364 (Chrome), CVE-2022-22620 (WebKit), CVE-2021-39793 (Google Pixel), CVE-2022-26134 (Atlassian Confluence) \u0438 CVE-2022-26925 (\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Windows \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043a\u0430\u043a PetitPotam).\n\n\u0412 \u043e\u0431\u0449\u0435\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0442\u0430\u043a, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043c\u043e\u0433\u043b\u0438 \u0432\u0435\u0440\u043d\u0443\u0442\u044c\u0441\u044f \u0438 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u0443\u0442\u0435\u043c \u043b\u0438\u0431\u043e \u0441\u043d\u043e\u0432\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0442\u0435 \u0436\u0435 \u043e\u0448\u0438\u0431\u043a\u0438.\n\n\u042d\u0442\u043e \u0432\u0441\u0435\u0433\u0434\u0430 \u0433\u0440\u043e\u043c\u043a\u043e \u0438 \u0431\u043e\u043b\u044c\u043d\u043e, \u043d\u043e \u043e\u0442\u0447\u0430\u0441\u0442\u0438 \u0445\u043e\u0440\u043e\u0448\u043e \u043a\u043e\u0433\u0434\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b 0-day \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435, \u0442\u0430\u043a \u043a\u0430\u043a \u044d\u0442\u043e \u043d\u0435\u0443\u0434\u0430\u0447\u0430 \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0430 \u0434\u043b\u044f \u0438\u043d\u0444\u043e\u0441\u0435\u043a \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0430 \u044d\u0442\u043e \u043f\u043e\u0434\u0430\u0440\u043e\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0437\u043d\u0430\u0442\u044c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0431\u043e\u043b\u044c\u0448\u0435 \u0438 \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b, \u0447\u0442\u043e\u0431\u044b \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c, \u0447\u0442\u043e \u044d\u0442\u043e\u0442 \u0432\u0435\u043a\u0442\u043e\u0440 \u043d\u0435\u043b\u044c\u0437\u044f \u0431\u0443\u0434\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432 \u0431\u0443\u0434\u0443\u0449\u0435\u043c.\n\n\u0427\u0442\u043e\u0431\u044b \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Google \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u0430\u043d\u0430\u043b\u0438\u0437 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u043f\u0440\u0438\u0447\u0438\u043d \u0438 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u043e\u0432 \u0432\u043e\u0437\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043e\u043a, \u0430\u043d\u0430\u043b\u0438\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f.", "url": "https://t.me/true_secator/3129"}, {"timestamp": "2023-04-04T19:41:45Z", "date_only": false, "value": "2023-04-04T19:41:45.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/BlueRedTeam/1663", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "4eb2bf82-04e3-44b2-8b5b-e82c7cede387", "content": "#exploit\n1. CVE-2022-21882:\nwin32k LPE bypass CVE-2021-1732\nhttps://github.com/KaLendsi/CVE-2022-21882\n// tested on windows 20h2 19042\n\n2. Technical Analysis of CVE-2022-22583:\nBypassing macOS System Integrity Protection (SIP)\nhttps://perception-point.io/technical-analysis-of-cve-2022-22583-bypassing-macos-system-integrity-protection\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/1663"}, {"timestamp": "2023-11-17T07:32:40Z", "date_only": false, "value": "2023-11-17T07:32:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/232", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "9cf59cb5-3931-4731-abf5-e028b2d03770", "content": "#ExploitObserverAlert\n\nCVE-2021-1732\n\nDESCRIPTION: Exploit Observer has 81 entries related to CVE-2021-1732. Windows Win32k Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1698.\n\nFIRST-EPSS: 0.006840000\nNVD-IS: 5.9\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/232"}, {"timestamp": "2023-12-13T01:23:21.909Z", "date_only": false, "value": "2023-12-13T01:23:21.909561Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-1732", "record": "GSD-2021-1732", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2023-12-29T22:33:19.772Z", "date_only": false, "value": "2023-12-29T22:33:19.772Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2021-1732", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-12-29T23:15:26.480Z", "date_only": false, "value": "2023-12-29T23:15:26.480", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-1732", "record": "GSD-2021-1732", "field": "namespaces.nvd.nist.gov.cve.lastModified", "linked_record": true}, {"timestamp": "2024-08-03T16:18:11.548Z", "date_only": false, "value": "2024-08-03T16:18:11.548Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-1732", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-09T19:13:31Z", "date_only": false, "value": "2024-10-09T19:13:31.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberSecurityTechnologies/2679", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "359e0e3e-bd05-4330-a670-f886fd320162", "content": "#exploit\nCVE-2021-1732:\nWindows kernel zero-day exploit is used by BITTER APT in targeted attack\nhttps://ti.dbappsecurity.com.cn/blog/index.php/2021/02/10/windows-kernel-zero-day-exploit-is-used-by-bitter-apt-in-targeted-attack\n]-> Exploit: https://github.com/KaLendsi/CVE-2021-1732-Exploit\n]-> PoC & Exp report: https://bbs.pediy.com/thread-266362.htm\n// all versions win10 are affected", "url": "https://t.me/CyberSecurityTechnologies/2679", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-11-09T02:11:51Z", "date_only": false, "value": "2024-11-09T02:11:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/club31337/784", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "1bb29a90-c692-40de-9bb5-e55009740656", "content": "https://github.com/Al1ex/WindowsElevation/tree/master/CVE-2021-1732", "url": "https://t.me/club31337/784", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-12-24T20:23:06.211Z", "date_only": false, "value": "2024-12-24T20:23:06.211144Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971017", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "5ac2c89f-36ab-4920-add2-351148f32b60", "url": "https://feedsin.space/feed/CISAKevBot/items/2971017"}, {"timestamp": "2025-01-20T22:00:06Z", "date_only": false, "value": "2025-01-20T22:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/QbKsrVZo62SnFgMaF2CMO5HKDx0dEQUP8BMaXCucwzSM5V8", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "f959e46c-e563-491c-a3e4-7b3b4991f1c1", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-06T03:13:44Z", "date_only": false, "value": "2025-02-06T03:13:44.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "d36bb5d9-9afb-4a0c-8c88-2a1cd1ebdc28"}, {"timestamp": "2025-02-23T02:09:50Z", "date_only": false, "value": "2025-02-23T02:09:50.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "759bb4e3-e696-4e27-9320-1e04b1b2c9c6"}, {"timestamp": "2025-02-23T04:10:33Z", "date_only": false, "value": "2025-02-23T04:10:33.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "67649031-fcca-4845-8676-51fe01b456e8"}, {"timestamp": "2025-08-31T03:01:03Z", "date_only": false, "value": "2025-08-31T03:01:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "464ae42e-3ed0-4f72-b8f5-75d4510b7c76"}, {"timestamp": "2025-10-22T00:32:03Z", "date_only": false, "value": "2025-10-22T00:32:03Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-GVWR-5HRC-2GR5", "record": "GHSA-GVWR-5HRC-2GR5", "field": "modified", "linked_record": true}, {"timestamp": "2026-02-02T12:28:51.873Z", "date_only": false, "value": "2026-02-02T12:28:51.873692Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a57b872c-aea7-4dc5-b9c6-f7a429b8887b", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "d44d519b-cac6-4b72-a66d-b4d46c46d428", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a57b872c-aea7-4dc5-b9c6-f7a429b8887b", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-02-17T13:27:58Z", "date_only": false, "value": "2026-02-17T13:27:58.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/garagon/85a72cafb243e1a793677270ca7fad6d", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "c6316186-9029-4b61-85f9-ac32ca49f31a", "url": "https://gist.github.com/garagon/85a72cafb243e1a793677270ca7fad6d"}, {"timestamp": "2026-03-16T13:31:31Z", "date_only": false, "value": "2026-03-16T13:31:31.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/josephb4224/1d49fcfaa37fb1523b5451314f37b669", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "5c21544e-5cc1-4a5b-9650-6091221973f0", "url": "https://gist.github.com/josephb4224/1d49fcfaa37fb1523b5451314f37b669"}, {"timestamp": "2026-06-12T08:55:52.896Z", "date_only": false, "value": "2026-06-12T08:55:52.896829Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/oxfemale.bsky.social/post/3mo3em3sv2r2u", "record": "cve-2021-1732", "field": "creation_timestamp", "uuid": "024efcd9-ddc2-43f5-97f0-aa4753a7d526", "content": "Original text: \"Windows Win32k Elevation of Privilege Vulnerability (Win32k ConsoleControl Offset Confusion) \u2014 CVE-2021-1732\" \u2014 Safe Security research paper (June 3, 2021). Figures and commands below are r\nhttps://core-jmp.org/2026/06/cve-2021-1732-win32k-consolecontrol-offset-confusion-walkthrough/", "url": "https://bsky.app/profile/oxfemale.bsky.social/post/3mo3em3sv2r2u"}, {"timestamp": "2026-06-12T12:27:26.391Z", "date_only": false, "value": "2026-06-12T12:27:26.391468Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mo3qgqmmoc2i", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "e3603775-94a4-44e7-a1c4-9d4f563df3b7", "content": "CVE-2021-1732 is a great example of how a tiny logic bug can compromise the entire Windows kernel.\n\nDuring \"NtUserCreateWindowEx()\", an attacker abuses a user-mode callback to confuse \"win32k.sys\" about a window'\u2026\n\n\ud83d\udd01 RT @OSdev_ | reposted by @thegrugq\nhttps://x.com/OSdev_/status/2065322490579296367", "url": "https://bsky.app/profile/infosecbot.bsky.social/post/3mo3qgqmmoc2i"}, {"timestamp": "2026-06-19T12:47:50.827Z", "date_only": false, "value": "2026-06-19T12:47:50.827087Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5ca6b15f-3e35-455a-bea6-e3b85fb59aed", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "b6a8f8b4-f3a3-4d30-8247-a10b11f49ce9", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5ca6b15f-3e35-455a-bea6-e3b85fb59aed", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2021-1732", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "1be30167-a6bb-4d2a-8d2a-03efa2f8587f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:04:38.036Z", "date_only": false, "value": "2026-06-23T14:04:38.036620Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1be30167-a6bb-4d2a-8d2a-03efa2f8587f", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "3353937d-5e21-415d-ac08-b8b7a82de3ef", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1be30167-a6bb-4d2a-8d2a-03efa2f8587f", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-29T12:02:59.268Z", "date_only": false, "value": "2026-07-29T12:02:59.268331Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1025", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "d6142084-6de9-4f4a-974a-edd7931ca48d", "content": "CVE-2021-1732: win32kfull xxxCreateWindowEx callback out-of-bounds https://iamelli0t.github.io/2021/03/25/CVE-2021-1732.html", "url": "https://t.me/reverseame/1025"}, {"timestamp": "2026-07-29T12:02:59.757Z", "date_only": false, "value": "2026-07-29T12:02:59.757437Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/923", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "111292ca-fa62-41ae-a711-94692ebdcc1d", "content": "Windows kernel zero-day exploit (CVE-2021-1732) is used by BITTER APT in targeted attack https://ti.dbappsecurity.com.cn/blog/index.php/2021/02/10/windows-kernel-zero-day-exploit-is-used-by-bitter-apt-in-targeted-attack/", "url": "https://t.me/reverseame/923"}, {"timestamp": "2026-07-29T12:03:00.087Z", "date_only": false, "value": "2026-07-29T12:03:00.087136Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/904", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "115c11dd-e9c2-4d62-bda6-49ec9d756934", "content": "Windows kernel zero-day exploit (CVE-2021-1732) is used by BITTER APT in targeted attack https://ti.dbappsecurity.com.cn/blog/index.php/2021/02/10/windows-kernel-zero-day-exploit-is-used-by-bitter-apt-in-targeted-attack/", "url": "https://t.me/reverseame/904"}, {"timestamp": "2026-08-03T12:08:06.544Z", "date_only": false, "value": "2026-08-03T12:08:06.544583Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/reverseame/923", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "caecbcf0-eb78-4f34-8d1d-7f68ce8ed2c2", "content": "Windows kernel zero-day exploit (CVE-2021-1732) is used by BITTER APT in targeted attack https://ti.dbappsecurity.com.cn/blog/index.php/2021/02/10/windows-kernel-zero-day-exploit-is-used-by-bitter-apt-in-targeted-attack/", "url": "https://t.me/reverseame/923", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-03T12:12:27.154Z", "date_only": false, "value": "2026-08-03T12:12:27.154213Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/1025", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "8a33bf3f-caf7-48c3-a15c-d226f423cb47", "content": "CVE-2021-1732: win32kfull xxxCreateWindowEx callback out-of-bounds https://iamelli0t.github.io/2021/03/25/CVE-2021-1732.html", "url": "https://t.me/reverseame/1025", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-03T13:23:47.852Z", "date_only": false, "value": "2026-08-03T13:23:47.852405Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/reverseame/904", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "cae49e9b-1d1e-4432-a51e-51f5691b0547", "content": "Windows kernel zero-day exploit (CVE-2021-1732) is used by BITTER APT in targeted attack https://ti.dbappsecurity.com.cn/blog/index.php/2021/02/10/windows-kernel-zero-day-exploit-is-used-by-bitter-apt-in-targeted-attack/", "url": "https://t.me/reverseame/904", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-09T04:38:09.731Z", "date_only": false, "value": "2026-08-09T04:38:09.731669Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/onelab1337/2109", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "7886d475-17e1-4741-b6ee-f37938437770", "content": "#exploit\n1. CVE-2022-21882:\nwin32k LPE bypass CVE-2021-1732\n*tested on windows 20h2 19042*\n\ud83d\udd17 See on Github\n\n2. Technical Analysis of CVE-2022-22583:\nBypassing macOS System Integrity Protection (SIP)\n\ud83d\udd17 See on PerceptionPoint\n\nShare and support us \u2764\ufe0f\n@zero0lab", "url": "https://t.me/onelab1337/2109"}, {"timestamp": "2026-08-10T00:00:26.402Z", "date_only": false, "value": "2026-08-10T00:00:26.402203Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/onelab1337/2109", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "1875300c-e994-4919-8ab2-b735b349150a", "content": "#exploit\n1. CVE-2022-21882:\nwin32k LPE bypass CVE-2021-1732\n*tested on windows 20h2 19042*\n\ud83d\udd17 See on Github\n\n2. Technical Analysis of CVE-2022-22583:\nBypassing macOS System Integrity Protection (SIP)\n\ud83d\udd17 See on PerceptionPoint\n\nShare and support us \u2764\ufe0f\n@zero0lab", "url": "https://t.me/onelab1337/2109", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-12T03:55:47.051Z", "date_only": false, "value": "2026-08-12T03:55:47.051Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-1732", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-12T03:55:47.051Z", "date_only": false, "value": "2026-08-12T03:55:47.051Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-1732", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-12T05:17:32.590Z", "date_only": false, "value": "2026-08-12T05:17:32.590", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-1732", "record": "FKIE_CVE-2021-1732", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-08-12T20:08:49.974Z", "date_only": false, "value": "2026-08-12T20:08:49.974031Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3msvwnx2mjc25", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "d78395a4-8ff2-407d-b220-0257cfcac5b4", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2021-1732: Windows Win32k Elevation of Privilege Vulnerability\nCVSS 7.8 \u00b7 EPSS 77.8% \u00b7 CISA KEV \u00b7 0day\nhttps://beta.vulnsea.com/cve/CVE-2021-1732\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3msvwnx2mjc25"}, {"timestamp": "2026-08-15T08:00:11.707Z", "date_only": false, "value": "2026-08-15T08:00:11.707759Z", "kind": "sighting", "label": "Seen", "source": "Telegram/vnyJ3RrHJZiCpj30ZwbcIIDCyWhOp74vFERTIQ3hWP3v4Q", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "44ba5adf-5d45-4cd5-bf7d-ee1a848ea618"}, {"timestamp": "2026-08-16T00:00:11.462Z", "date_only": false, "value": "2026-08-16T00:00:11.462254Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/vnyJ3RrHJZiCpj30ZwbcIIDCyWhOp74vFERTIQ3hWP3v4Q", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "dd1a2f66-2864-4941-88a7-55f7d7f30172", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-01T17:00:48.952Z", "date_only": false, "value": "2026-09-01T17:00:48.952816Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/3349", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "2327b8d8-6bea-4c85-b86d-09a5b47b8343", "content": "Whitepaper\n\"Windows Win32k Elevation Of Privilege Vulnerability\", 2021.\n// Whitepaper called Windows Win32k Elevation of Privilege Vulnerability. It details exploitation and an overview of CVE-2021-1732", "url": "https://t.me/cissp/3349"}, {"timestamp": "2026-09-01T20:00:51.783Z", "date_only": false, "value": "2026-09-01T20:00:51.783328Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/117629", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "d2bf2206-d882-433d-b518-ecb76519ccd4", "content": "How do u compile different poc written in C++\nhttps://www.reddit.com/r/redteamsec/comments/16cgezu/how_do_u_compile_different_poc_written_in_c/\n\nI'm going through the lab, and now it`s high time to elevate privileges user-->system I want to use the lattest cve-2023-36874 or CVE-2021-1732 to elevate privs But as soon as I use g++ I have so many different errors.  The question is what the best way to compile c++ binaries is?    submitted by    /u/no_seaweed666  (https://www.reddit.com/user/no_seaweed666) \n [link] (https://www.reddit.com/r/redteamsec/comments/16cgezu/how_do_u_compile_different_poc_written_in_c/)   [comments] (https://www.reddit.com/r/redteamsec/comments/16cgezu/how_do_u_compile_different_poc_written_in_c/)", "url": "https://t.me/hacking_Attack/117629"}, {"timestamp": "2026-09-01T20:01:57.978Z", "date_only": false, "value": "2026-09-01T20:01:57.978398Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/40863", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "0c1aa949-1c6f-4d4e-ae57-afd0fe041b3e", "content": "Black Hat Ethical Hacking\nWindows vulnerability with new public exploits lets you become admin\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Windows vulnerability with new public exploits lets you become adminPost Views: 206 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute\nA security researcher has publicly disclosed an exploit for a Windows local privilege elevation vulnerability that allows anyone to gain admin privileges in Windows 10.\nUsing this vulnerability, threat actors with limited access to a compromised device can easily elevate their privileges to help spread laterally within the network, create new administrative users, or perform privileged commands.\n\nThe vulnerability affects all supported support versions of Windows 10 before the January 2022 Patch Tuesday updates. Researcher releases bypass to patched vulnerabilityAs part of the January 2022 Patch Tuesday, Microsoft fixed a \u2018Win32k Elevation of Privilege Vulnerability\u2019 vulnerability tracked as CVE-2022-21882, which is a bypass for the previously patched and actively exploited CVE-2021-1732 bug.\n\nMicrosoft attributes the discovery of this vulnerability to RyeLv, who shared a technical analysis\u00a0of the vulnerability after Microsoft released the patch.\nSee Also: Complete Offensive Security and Ethical Hacking Course\nRegarding the just-fixed CVE-2022-21882: \nwin32k privilege escalation vulnerability,\nCVE-2021-1732 patch bypass,easy to exploit,which was used by apt attacks\n\n\u2014 b2ahex (@b2ahex) January 12, 2022\nThis week, multiple exploits were publicly released for\u00a0CVE-2022-21882 that allow anyone to gain SYSTEM privileges on vulnerable Windows 10 devices.\n\nAfter the exploit\u2019s release, Will Dormann, a vulnerability analyst for CERT/CC and Twitter\u2019s resident exploit tester, confirmed that the exploits works\u00a0and provides elevated privileges.\n\nBleepingComputer also tested the vulnerability and had no problem compiling the exploit and using it to open Notepad with SYSTEM privileges on Windows 10, as shown below. BleepingComputer could not get the exploit to work on Windows 11.\nhttps://www.bleepstatic.com/images/news/Microsoft/vulnerabilities/CVE-2022-21882/CVE-2022-21882-test.jpg \nBug found two years earlierThis same vulnerability was discovered two years ago\u00a0by Israeli security researcher and Piiano CEO Gil Dabah, who decided not to disclose the bug due to the reduced bug bounty rewards\u00a0by Microsoft.\n\nDabah is not alone in his frustrations over Microsoft\u2019s diminishing bug bounty rewards.\n\nIn[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/40863"}, {"timestamp": "2026-09-04T09:00:05.319Z", "date_only": false, "value": "2026-09-04T09:00:05.319303Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/117629", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "6bbd8fd6-feaa-4da4-b3fe-3744353e92f4", "content": "How do u compile different poc written in C++\nhttps://www.reddit.com/r/redteamsec/comments/16cgezu/how_do_u_compile_different_poc_written_in_c/\n\nI'm going through the lab, and now it`s high time to elevate privileges user-->system I want to use the lattest cve-2023-36874 or CVE-2021-1732 to elevate privs But as soon as I use g++ I have so many different errors.  The question is what the best way to compile c++ binaries is?    submitted by    /u/no_seaweed666  (https://www.reddit.com/user/no_seaweed666) \n [link] (https://www.reddit.com/r/redteamsec/comments/16cgezu/how_do_u_compile_different_poc_written_in_c/)   [comments] (https://www.reddit.com/r/redteamsec/comments/16cgezu/how_do_u_compile_different_poc_written_in_c/)", "url": "https://t.me/hacking_Attack/117629", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-05T18:00:05.929Z", "date_only": false, "value": "2026-09-05T18:00:05.929487Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/wtW6bpJN7eATls7OA2vLhVZp9FPDSfjpd85Ww_IzNKkpSTY", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "06b6feb8-92d4-4171-b1e7-e81cbfdf3000", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-06T11:00:05.522Z", "date_only": false, "value": "2026-09-06T11:00:05.522804Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hacking_Attack/40863", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "6ed8c505-31ba-495d-90b6-f4e82cb69303", "content": "Black Hat Ethical Hacking\nWindows vulnerability with new public exploits lets you become admin\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Windows vulnerability with new public exploits lets you become adminPost Views: 206 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute\nA security researcher has publicly disclosed an exploit for a Windows local privilege elevation vulnerability that allows anyone to gain admin privileges in Windows 10.\nUsing this vulnerability, threat actors with limited access to a compromised device can easily elevate their privileges to help spread laterally within the network, create new administrative users, or perform privileged commands.\n\nThe vulnerability affects all supported support versions of Windows 10 before the January 2022 Patch Tuesday updates. Researcher releases bypass to patched vulnerabilityAs part of the January 2022 Patch Tuesday, Microsoft fixed a \u2018Win32k Elevation of Privilege Vulnerability\u2019 vulnerability tracked as CVE-2022-21882, which is a bypass for the previously patched and actively exploited CVE-2021-1732 bug.\n\nMicrosoft attributes the discovery of this vulnerability to RyeLv, who shared a technical analysis\u00a0of the vulnerability after Microsoft released the patch.\nSee Also: Complete Offensive Security and Ethical Hacking Course\nRegarding the just-fixed CVE-2022-21882: \nwin32k privilege escalation vulnerability,\nCVE-2021-1732 patch bypass,easy to exploit,which was used by apt attacks\n\n\u2014 b2ahex (@b2ahex) January 12, 2022\nThis week, multiple exploits were publicly released for\u00a0CVE-2022-21882 that allow anyone to gain SYSTEM privileges on vulnerable Windows 10 devices.\n\nAfter the exploit\u2019s release, Will Dormann, a vulnerability analyst for CERT/CC and Twitter\u2019s resident exploit tester, confirmed that the exploits works\u00a0and provides elevated privileges.\n\nBleepingComputer also tested the vulnerability and had no problem compiling the exploit and using it to open Notepad with SYSTEM privileges on Windows 10, as shown below. BleepingComputer could not get the exploit to work on Windows 11.\nhttps://www.bleepstatic.com/images/news/Microsoft/vulnerabilities/CVE-2022-21882/CVE-2022-21882-test.jpg \nBug found two years earlierThis same vulnerability was discovered two years ago\u00a0by Israeli security researcher and Piiano CEO Gil Dabah, who decided not to disclose the bug due to the reduced bug bounty rewards\u00a0by Microsoft.\n\nDabah is not alone in his frustrations over Microsoft\u2019s diminishing bug bounty rewards.\n\nIn[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/40863", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-11T04:00:04.807Z", "date_only": false, "value": "2026-09-11T04:00:04.807986Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/3349", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "6cbd32c9-1d6d-4542-b320-4fac184195aa", "content": "Whitepaper\n\"Windows Win32k Elevation Of Privilege Vulnerability\", 2021.\n// Whitepaper called Windows Win32k Elevation of Privilege Vulnerability. It details exploitation and an overview of CVE-2021-1732", "url": "https://t.me/cissp/3349", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-04T13:31:51Z", "date_only": false, "value": "2026-11-04T13:31:51+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2021-1732", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "a57b872c-aea7-4dc5-b9c6-f7a429b8887b", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-14T22:50:15.364Z", "anchors": {"origin": {"timestamp": "2021-02-09T08:00:00Z", "date_only": false, "value": "2021-02-09T08:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2021-1732", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2021-02-09T08:00:00Z", "date_only": false, "value": "2021-02-09T08:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2021-1732", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2021-03-09T21:01:58Z", "date_only": false, "value": "2021-03-09T21:01:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reconshell/534", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "d896e078-a309-4e46-9732-7dc7778fed4b", "content": "CVE-2021-1732 Microsoft Windows 10 Privilege Escalation\n\n#CVE-2021-1732 #PrivilegeEscalation #Exploit #InfoSec\n#Hacking #CyberSecurity #cve #windows\n\nhttps://reconshell.com/cve-2021-1732-microsoft-windows-10-privilege-escalation/", "url": "https://t.me/reconshell/534", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2021-02-10T09:42:00Z", "date_only": false, "value": "2021-02-10T09:42:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/1419", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "a7ed0425-3b5d-4e4d-a451-bdce8c4bc776", "content": "\u0427\u0443\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 \u0441\u0443\u0442\u043e\u043a \u043d\u0430\u0437\u0430\u0434 Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432. \u0412\u0441\u0435\u0433\u043e \u0431\u044b\u043b\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 56 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, 11 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u043c\u0438.\n\n\u0412 \u0447\u0438\u0441\u043b\u0435 \u0434\u0440\u0443\u0433\u0438\u0445 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 CVE-2021-1732, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u0432 \u044f\u0434\u0440\u0435 Windows \u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u0430 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044f\u0432\u043b\u044f\u043b\u0430\u0441\u044c 0-day \u0438 \u043a\u0430\u0441\u0430\u043b\u0430\u0441\u044c \u0432\u0441\u0435\u0445 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 Windows 10.\n\n\u0410 \u0443\u0436\u0435 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u043d\u043e\u0447\u044c\u044e \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f \u0438\u043d\u0444\u043e\u0441\u0435\u043a \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f DBAPPSecurity \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0438\u043c\u0435\u043d\u043d\u043e \u0435\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2020 \u0433\u043e\u0434\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 CVE-2021-1732 \u0438 \u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 APT Bitter \u0432 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u0422\u0430\u043a\u0436\u0435 \u043a\u0438\u0442\u0430\u0439\u0446\u044b \u0434\u0430\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u0438 \u043f\u0440\u0438\u0432\u0435\u043b\u0438 PoC. \u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 - \"\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0430 \u0432\u044b\u0441\u043e\u043a\u043e\u043a\u0432\u0430\u043b\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438, \u0430 \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0432\u0435\u0441\u044c\u043c\u0430 \u0441\u043b\u043e\u0436\u0435\u043d\". \n\nAPT Bitter - \u044d\u0442\u043e \u0430\u0437\u0438\u0430\u0442\u0441\u043a\u0430\u044f \u043f\u0440\u043e\u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u0430\u044f \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0430\u044f \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043f\u043e \u041f\u0430\u043a\u0438\u0441\u0442\u0430\u043d\u0443 \u0438 \u041a\u0438\u0442\u0430\u044e. \u0418\u0441\u0445\u043e\u0434\u044f \u0438\u0437 \u0442\u0430\u043a\u043e\u0433\u043e \u043d\u0430\u0431\u043e\u0440\u0430 \u0446\u0435\u043b\u0435\u0439, \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u044c, \u0447\u0442\u043e \u0437\u0430 \u043d\u0435\u0439 \u0441\u0442\u043e\u0438\u0442 \u0418\u043d\u0434\u0438\u044f.", "url": "https://t.me/true_secator/1419", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 92520.0, "hours": 25.7, "days": 1.0708333333333333, "min_seconds": 92520.0, "max_seconds": 92520.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-02-09T08:00:00Z", "date_only": false, "value": "2021-02-09T08:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2021-1732", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2021-02-10T09:42:00Z", "date_only": false, "value": "2021-02-10T09:42:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/1419", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "a7ed0425-3b5d-4e4d-a451-bdce8c4bc776", "content": "\u0427\u0443\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 \u0441\u0443\u0442\u043e\u043a \u043d\u0430\u0437\u0430\u0434 Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432. \u0412\u0441\u0435\u0433\u043e \u0431\u044b\u043b\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 56 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, 11 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u043c\u0438.\n\n\u0412 \u0447\u0438\u0441\u043b\u0435 \u0434\u0440\u0443\u0433\u0438\u0445 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 CVE-2021-1732, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u0432 \u044f\u0434\u0440\u0435 Windows \u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u0430 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044f\u0432\u043b\u044f\u043b\u0430\u0441\u044c 0-day \u0438 \u043a\u0430\u0441\u0430\u043b\u0430\u0441\u044c \u0432\u0441\u0435\u0445 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 Windows 10.\n\n\u0410 \u0443\u0436\u0435 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u043d\u043e\u0447\u044c\u044e \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f \u0438\u043d\u0444\u043e\u0441\u0435\u043a \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f DBAPPSecurity \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0438\u043c\u0435\u043d\u043d\u043e \u0435\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2020 \u0433\u043e\u0434\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 CVE-2021-1732 \u0438 \u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 APT Bitter \u0432 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u0422\u0430\u043a\u0436\u0435 \u043a\u0438\u0442\u0430\u0439\u0446\u044b \u0434\u0430\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u0438 \u043f\u0440\u0438\u0432\u0435\u043b\u0438 PoC. \u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 - \"\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0430 \u0432\u044b\u0441\u043e\u043a\u043e\u043a\u0432\u0430\u043b\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438, \u0430 \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0432\u0435\u0441\u044c\u043c\u0430 \u0441\u043b\u043e\u0436\u0435\u043d\". \n\nAPT Bitter - \u044d\u0442\u043e \u0430\u0437\u0438\u0430\u0442\u0441\u043a\u0430\u044f \u043f\u0440\u043e\u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u0430\u044f \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0430\u044f \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043f\u043e \u041f\u0430\u043a\u0438\u0441\u0442\u0430\u043d\u0443 \u0438 \u041a\u0438\u0442\u0430\u044e. \u0418\u0441\u0445\u043e\u0434\u044f \u0438\u0437 \u0442\u0430\u043a\u043e\u0433\u043e \u043d\u0430\u0431\u043e\u0440\u0430 \u0446\u0435\u043b\u0435\u0439, \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u044c, \u0447\u0442\u043e \u0437\u0430 \u043d\u0435\u0439 \u0441\u0442\u043e\u0438\u0442 \u0418\u043d\u0434\u0438\u044f.", "url": "https://t.me/true_secator/1419", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit": {"available": true, "seconds": 92520.0, "hours": 25.7, "days": 1.0708333333333333, "min_seconds": 92520.0, "max_seconds": 92520.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-02-09T08:00:00Z", "date_only": false, "value": "2021-02-09T08:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2021-1732", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2021-02-10T09:42:00Z", "date_only": false, "value": "2021-02-10T09:42:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/1419", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "a7ed0425-3b5d-4e4d-a451-bdce8c4bc776", "content": "\u0427\u0443\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 \u0441\u0443\u0442\u043e\u043a \u043d\u0430\u0437\u0430\u0434 Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432. \u0412\u0441\u0435\u0433\u043e \u0431\u044b\u043b\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 56 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, 11 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u043c\u0438.\n\n\u0412 \u0447\u0438\u0441\u043b\u0435 \u0434\u0440\u0443\u0433\u0438\u0445 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 CVE-2021-1732, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u0432 \u044f\u0434\u0440\u0435 Windows \u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u0430 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044f\u0432\u043b\u044f\u043b\u0430\u0441\u044c 0-day \u0438 \u043a\u0430\u0441\u0430\u043b\u0430\u0441\u044c \u0432\u0441\u0435\u0445 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 Windows 10.\n\n\u0410 \u0443\u0436\u0435 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u043d\u043e\u0447\u044c\u044e \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f \u0438\u043d\u0444\u043e\u0441\u0435\u043a \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f DBAPPSecurity \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0438\u043c\u0435\u043d\u043d\u043e \u0435\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2020 \u0433\u043e\u0434\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 CVE-2021-1732 \u0438 \u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 APT Bitter \u0432 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u0422\u0430\u043a\u0436\u0435 \u043a\u0438\u0442\u0430\u0439\u0446\u044b \u0434\u0430\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u0438 \u043f\u0440\u0438\u0432\u0435\u043b\u0438 PoC. \u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 - \"\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0430 \u0432\u044b\u0441\u043e\u043a\u043e\u043a\u0432\u0430\u043b\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438, \u0430 \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0432\u0435\u0441\u044c\u043c\u0430 \u0441\u043b\u043e\u0436\u0435\u043d\". \n\nAPT Bitter - \u044d\u0442\u043e \u0430\u0437\u0438\u0430\u0442\u0441\u043a\u0430\u044f \u043f\u0440\u043e\u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u0430\u044f \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0430\u044f \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043f\u043e \u041f\u0430\u043a\u0438\u0441\u0442\u0430\u043d\u0443 \u0438 \u041a\u0438\u0442\u0430\u044e. \u0418\u0441\u0445\u043e\u0434\u044f \u0438\u0437 \u0442\u0430\u043a\u043e\u0433\u043e \u043d\u0430\u0431\u043e\u0440\u0430 \u0446\u0435\u043b\u0435\u0439, \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u044c, \u0447\u0442\u043e \u0437\u0430 \u043d\u0435\u0439 \u0441\u0442\u043e\u0438\u0442 \u0418\u043d\u0434\u0438\u044f.", "url": "https://t.me/true_secator/1419", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 2466118.0, "hours": 685.0327777777778, "days": 28.543032407407406, "min_seconds": 2466118.0, "max_seconds": 2466118.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-02-09T08:00:00Z", "date_only": false, "value": "2021-02-09T08:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2021-1732", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2021-03-09T21:01:58Z", "date_only": false, "value": "2021-03-09T21:01:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reconshell/534", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "d896e078-a309-4e46-9732-7dc7778fed4b", "content": "CVE-2021-1732 Microsoft Windows 10 Privilege Escalation\n\n#CVE-2021-1732 #PrivilegeEscalation #Exploit #InfoSec\n#Hacking #CyberSecurity #cve #windows\n\nhttps://reconshell.com/cve-2021-1732-microsoft-windows-10-privilege-escalation/", "url": "https://t.me/reconshell/534", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 181839015.364793, "hours": 50510.83760133139, "days": 2104.6182333888078, "min_seconds": 181839015.364793, "max_seconds": 181839015.364793, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-02-09T08:00:00Z", "date_only": false, "value": "2021-02-09T08:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2021-1732", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-14T22:50:15.364Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 181746495.364793, "hours": 50485.13760133139, "days": 2103.5474000554746, "min_seconds": 181746495.364793, "max_seconds": 181746495.364793, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-02-10T09:42:00Z", "date_only": false, "value": "2021-02-10T09:42:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/1419", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "a7ed0425-3b5d-4e4d-a451-bdce8c4bc776", "content": "\u0427\u0443\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 \u0441\u0443\u0442\u043e\u043a \u043d\u0430\u0437\u0430\u0434 Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432. \u0412\u0441\u0435\u0433\u043e \u0431\u044b\u043b\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 56 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, 11 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u043c\u0438.\n\n\u0412 \u0447\u0438\u0441\u043b\u0435 \u0434\u0440\u0443\u0433\u0438\u0445 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 CVE-2021-1732, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u0432 \u044f\u0434\u0440\u0435 Windows \u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u0430 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044f\u0432\u043b\u044f\u043b\u0430\u0441\u044c 0-day \u0438 \u043a\u0430\u0441\u0430\u043b\u0430\u0441\u044c \u0432\u0441\u0435\u0445 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 Windows 10.\n\n\u0410 \u0443\u0436\u0435 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u043d\u043e\u0447\u044c\u044e \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f \u0438\u043d\u0444\u043e\u0441\u0435\u043a \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f DBAPPSecurity \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0438\u043c\u0435\u043d\u043d\u043e \u0435\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2020 \u0433\u043e\u0434\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 CVE-2021-1732 \u0438 \u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 APT Bitter \u0432 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u0422\u0430\u043a\u0436\u0435 \u043a\u0438\u0442\u0430\u0439\u0446\u044b \u0434\u0430\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u0438 \u043f\u0440\u0438\u0432\u0435\u043b\u0438 PoC. \u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 - \"\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0430 \u0432\u044b\u0441\u043e\u043a\u043e\u043a\u0432\u0430\u043b\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438, \u0430 \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0432\u0435\u0441\u044c\u043c\u0430 \u0441\u043b\u043e\u0436\u0435\u043d\". \n\nAPT Bitter - \u044d\u0442\u043e \u0430\u0437\u0438\u0430\u0442\u0441\u043a\u0430\u044f \u043f\u0440\u043e\u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u0430\u044f \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0430\u044f \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043f\u043e \u041f\u0430\u043a\u0438\u0441\u0442\u0430\u043d\u0443 \u0438 \u041a\u0438\u0442\u0430\u044e. \u0418\u0441\u0445\u043e\u0434\u044f \u0438\u0437 \u0442\u0430\u043a\u043e\u0433\u043e \u043d\u0430\u0431\u043e\u0440\u0430 \u0446\u0435\u043b\u0435\u0439, \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u044c, \u0447\u0442\u043e \u0437\u0430 \u043d\u0435\u0439 \u0441\u0442\u043e\u0438\u0442 \u0418\u043d\u0434\u0438\u044f.", "url": "https://t.me/true_secator/1419", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-14T22:50:15.364Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 179372897.364793, "hours": 49825.80482355361, "days": 2076.0752009814005, "min_seconds": 179372897.364793, "max_seconds": 179372897.364793, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-03-09T21:01:58Z", "date_only": false, "value": "2021-03-09T21:01:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reconshell/534", "record": "CVE-2021-1732", "field": "creation_timestamp", "uuid": "d896e078-a309-4e46-9732-7dc7778fed4b", "content": "CVE-2021-1732 Microsoft Windows 10 Privilege Escalation\n\n#CVE-2021-1732 #PrivilegeEscalation #Exploit #InfoSec\n#Hacking #CyberSecurity #cve #windows\n\nhttps://reconshell.com/cve-2021-1732-microsoft-windows-10-privilege-escalation/", "url": "https://t.me/reconshell/534", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-14T22:50:15.364Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}