Netskope Threat Labs

OS-WINDOWS Microsoft Windows Win32k elevation of privilege attempt

IPS-CFWIPS-SWG

33 SIDs: 57263, 57347, 57403, 60383, 60694, 60696, 60816, 61606, 62763, 62848, 62993, 63582, 63596, 66443, 66460, 66735, 66773, 66777, 66779, 66809, 66811, 66923, 66938, 67022, 67039, 67066, 67076, 152130, 200112, 200141, 200309, 200321, 200322

Stats

First seen
August 2026
Last seen
September 2026

Description

Detects an attempt to exploit CVE-2021-26863, CVE-2021-1732, CVE-2026-33840, and 24 others, a privilege escalation flaw that can grant higher access in Microsoft Windows Win32k.

CVEs

CVE-2021-26863CVE-2021-1732CVE-2026-33840CVE-2026-35417CVE-2026-49805CVE-2026-50489CVE-2026-50688CVE-2026-54114CVE-2026-50325CVE-2026-50297CVE-2026-65775CVE-2026-62712CVE-2026-69779CVE-2026-69301CVE-2026-69498CVE-2026-70289CVE-2021-28310CVE-2022-35750CVE-2022-38050CVE-2022-41109CVE-2023-28274CVE-2023-35631CVE-2024-20683CVE-2024-21346CVE-2024-30091CVE-2024-30087

Related malware families

Microsoft

References