一、漏洞详情
Microsoft Windows Win32k是美国微软（Microsoft）公司的一个操作系统。提供一个多任务的图形用户界面。
微软官方修复了一个Windows Win32k权限提升漏洞，漏洞CVE编号：CVE-2021-1732。该漏洞是由于Windows内核模式驱动对内存对象处理不当导致，本地攻击者可利用此漏洞提升到system权限。该漏洞利用细节及POC已被公开。建议受影响用户及时更新漏洞修复补丁进行防护，做好资产自查以及预防工作，以免遭受黑客攻击。
二、影响范围
Windows Server, version 20H2 (Server Core Installation)
Windows 10 Version 20H2 for ARM64-based Systems
Windows 10 Version 20H2 for 32-bit Systems
Windows 10 Version 20H2 for x64-based Systems
Windows Server, version 2004 (Server Core installation)
Windows 10 Version 2004 for x64-based Systems
Windows 10 Version 2004 for ARM64-based Systems
Windows 10 Version 2004 for 32-bit Systems
Windows Server, version 1909 (Server Core installation)
Windows 10 Version 1909 for ARM64-based Systems
Windows 10 Version 1909 for x64-based Systems
Windows 10 Version 1909 for 32-bit Systems
Windows Server 2019 (Server Core installation)
Windows Server 2019
Windows 10 Version 1809 for ARM64-based Systems
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 1803 for ARM64-based Systems
Windows 10 Version 1803 for x64-based Systems
三、修复建议
目前微软官方已发布漏洞修复补丁，建议受影响用户及时升级更新。
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1732