{"schemaVersion":3,"id":"CVE-2021-26868","aliases":[],"status":"published","duplicateOf":null,"title":"Windows Graphics Component Elevation of Privilege Vulnerability","description":"Windows Graphics Component Elevation of Privilege Vulnerability","dates":{"published":"2021-03-11T15:38:39.000Z","modified":"2026-08-19T16:30:21.928Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.8,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.8,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.8,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4.6,"severity":"medium","vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.0308,"percentile":0.87588,"severity":"low","asOf":"2026-10-22T00:00:00.000Z","change":{"pp":0.02599999999999998,"baselineDate":"2026-09-22T00:00:00.000Z","baselineScore":0.03054},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0308,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0308,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0308,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0308,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0308,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0308,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.0308,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.0308,"percentile":null},{"date":"2026-10-22T00:00:00.000Z","score":0.0308,"percentile":0.87588}],"last30":[{"date":"2026-09-22T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.03054,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0308,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0308,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0308,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0308,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0308,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0308,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.0308,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.0308,"percentile":null},{"date":"2026-10-22T00:00:00.000Z","score":0.0308,"percentile":0.87588}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-119","name":"Improper Restriction of Operations within the Bounds of a Memory Buffer","description":"The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/119.html"}],"affected":[{"vendor":"microsoft","product":"windows_10","name":"windows 10","label":"windows_10","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null},{"text":"20h2","noFixRecorded":false,"fixedIn":null},{"text":"1607","noFixRecorded":false,"fixedIn":null},{"text":"1803","noFixRecorded":false,"fixedIn":null},{"text":"1809","noFixRecorded":false,"fixedIn":null},{"text":"1909","noFixRecorded":false,"fixedIn":null},{"text":"2004","noFixRecorded":false,"fixedIn":null}],"versionsText":"na | 20h2 | 1607 | 1803 | 1809 | 1909 | 2004","eol":null,"hubHref":"/vendor/microsoft/windows_10"},{"vendor":"microsoft","product":"windows 10 version 1507","name":"Windows 10 Version 1507","label":"windows 10 version 1507","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 10.0.10240.0, < 10.0.10240.18874","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.10240.0, < 10.0.10240.18874","eol":null,"hubHref":"/vendor/microsoft/windows_10_version_1507"},{"vendor":"microsoft","product":"windows 10 version 1607","name":"Windows 10 Version 1607","label":"windows 10 version 1607","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 10.0.14393.0, < 10.0.14393.4283","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.14393.0, < 10.0.14393.4283","eol":null,"hubHref":"/vendor/microsoft/windows_10_version_1607"},{"vendor":"microsoft","product":"windows 10 version 1803","name":"Windows 10 Version 1803","label":"windows 10 version 1803","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 10.0.0, < 10.0.17134.2087","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.0, < 10.0.17134.2087","eol":null,"hubHref":"/vendor/microsoft/windows_10_version_1803"},{"vendor":"microsoft","product":"windows 10 version 1809","name":"Windows 10 Version 1809","label":"windows 10 version 1809","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 10.0.17763.0, < 10.0.17763.1817","noFixRecorded":false,"fixedIn":null},{"text":"≥ 10.0.0, < 10.0.17763.1817","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.17763.0, < 10.0.17763.1817 | ≥ 10.0.0, < 10.0.17763.1817","eol":null,"hubHref":"/vendor/microsoft/windows_10_version_1809"},{"vendor":"microsoft","product":"windows 10 version 1909","name":"Windows 10 Version 1909","label":"windows 10 version 1909","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 10.0.0, < 10.0.18363.1440","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.0, < 10.0.18363.1440","eol":null,"hubHref":"/vendor/microsoft/windows_10_version_1909"},{"vendor":"microsoft","product":"windows 10 version 2004","name":"Windows 10 Version 2004","label":"windows 10 version 2004","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 10.0.0, < 10.0.19043.867","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.0, < 10.0.19043.867","eol":null,"hubHref":"/vendor/microsoft/windows_10_version_2004"},{"vendor":"microsoft","product":"windows 10 version 20h2","name":"Windows 10 Version 20H2","label":"windows 10 version 20h2","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 10.0.0, < 10.0.19043.867","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.0, < 10.0.19043.867","eol":null,"hubHref":"/vendor/microsoft/windows_10_version_20h2"},{"vendor":"microsoft","product":"windows_8.1","name":"windows 8.1","label":"windows_8.1","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 6.3.0, < 6.3.9600.19968","noFixRecorded":false,"fixedIn":null},{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 6.3.0, < 6.3.9600.19968 | na","eol":null,"hubHref":"/vendor/microsoft/windows_81"},{"vendor":"microsoft","product":"windows_rt_8.1","name":"windows rt 8.1","label":"windows_rt_8.1","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_rt_81"},{"vendor":"microsoft","product":"windows_server_2012","name":"windows server 2012","label":"windows_server_2012","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 6.2.9200.0, < 6.2.9200.23298","noFixRecorded":false,"fixedIn":null},{"text":"na","noFixRecorded":false,"fixedIn":null},{"text":"r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 6.2.9200.0, < 6.2.9200.23298 | na | r2","eol":null,"hubHref":"/vendor/microsoft/windows_server_2012"},{"vendor":"microsoft","product":"windows server 2012 r2","name":"Windows Server 2012 R2","label":"windows server 2012 r2","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 6.3.9600.0, < 6.3.9600.19968","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 6.3.9600.0, < 6.3.9600.19968","eol":null,"hubHref":"/vendor/microsoft/windows_server_2012_r2"},{"vendor":"microsoft","product":"windows server 2012 r2 (server core installation)","name":"Windows Server 2012 R2 (Server Core installation)","label":"windows server 2012 r2 (server core installation)","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 6.3.9600.0, < 6.3.9600.19968","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 6.3.9600.0, < 6.3.9600.19968","eol":null,"hubHref":"/vendor/microsoft/windows_server_2012_r2_server_core_installation"},{"vendor":"microsoft","product":"windows server 2012 (server core installation)","name":"Windows Server 2012 (Server Core installation)","label":"windows server 2012 (server core installation)","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 6.2.9200.0, < 6.2.9200.23298","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 6.2.9200.0, < 6.2.9200.23298","eol":null,"hubHref":"/vendor/microsoft/windows_server_2012_server_core_installation"},{"vendor":"microsoft","product":"windows_server_2016","name":"windows server 2016","label":"windows_server_2016","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 10.0.14393.0, < 10.0.14393.4283","noFixRecorded":false,"fixedIn":null},{"text":"na","noFixRecorded":false,"fixedIn":null},{"text":"20h2","noFixRecorded":false,"fixedIn":null},{"text":"1909","noFixRecorded":false,"fixedIn":null},{"text":"2004","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.14393.0, < 10.0.14393.4283 | na | 20h2 | 1909 | 2004","eol":null,"hubHref":"/vendor/microsoft/windows_server_2016"},{"vendor":"microsoft","product":"windows server 2016 (server core installation)","name":"Windows Server 2016 (Server Core installation)","label":"windows server 2016 (server core installation)","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 10.0.14393.0, < 10.0.14393.4283","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.14393.0, < 10.0.14393.4283","eol":null,"hubHref":"/vendor/microsoft/windows_server_2016_server_core_installation"},{"vendor":"microsoft","product":"windows_server_2019","name":"windows server 2019","label":"windows_server_2019","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 10.0.17763.0, < 10.0.17763.1817","noFixRecorded":false,"fixedIn":null},{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.17763.0, < 10.0.17763.1817 | na","eol":null,"hubHref":"/vendor/microsoft/windows_server_2019"},{"vendor":"microsoft","product":"windows server 2019 (server core installation)","name":"Windows Server 2019 (Server Core installation)","label":"windows server 2019 (server core installation)","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 10.0.17763.0, < 10.0.17763.1817","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.17763.0, < 10.0.17763.1817","eol":null,"hubHref":"/vendor/microsoft/windows_server_2019_server_core_installation"},{"vendor":"microsoft","product":"windows server, version 1909 (server core installation)","name":"Windows Server, version 1909 (Server Core installation)","label":"windows server, version 1909 (server core installation)","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 10.0.0, < 10.0.18363.1440","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.0, < 10.0.18363.1440","eol":null,"hubHref":"/vendor/microsoft/windows_server_version_1909_server_core_installation"},{"vendor":"microsoft","product":"windows server version 2004","name":"Windows Server version 2004","label":"windows server version 2004","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 10.0.0, < 10.0.19043.867","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.0, < 10.0.19043.867","eol":null,"hubHref":"/vendor/microsoft/windows_server_version_2004"},{"vendor":"microsoft","product":"windows server version 20h2","name":"Windows Server version 20H2","label":"windows server version 20h2","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 10.0.0, < 10.0.19043.867","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.0, < 10.0.19043.867","eol":null,"hubHref":"/vendor/microsoft/windows_server_version_20h2"}],"affectedCount":21,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26868","label":"msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26868","hostname":"msrc.microsoft.com","tags":["Vendor Advisory","Patch"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26868","label":"portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26868","hostname":"portal.msrc.microsoft.com","tags":["X Refsource MISC","X Transferred","Patch","Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2021-03-11T15:38:39.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-08-19T16:30:21.928Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":32,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T20:32:43.859Z","stale":false,"partial":false}}