Constellation · CASCA

Constellation explorer

Every signal has a story.Follow the evidence.

Return to triage

Find a CVE by identifier or text

↵ select

Minimum eligible CVSSOrderKEV only

Start with evidence

Current exploration

CVE-2021-40449

Your trail

Where next?

Selected cve

CVE-2021-40449

Win32k Elevation of Privilege Vulnerability

48 retained evidence references · snapshot-bound · open authoritative view

StateSource-scoped evidence

Priority84.3–90.1

Coverage91.6%

Connections46

Choose an action.

Evidence state

identity unresolved
known present
evidence unknown

Snapshot-bound reason tuple

Evidence supportedfactor_a_kev

Eligible evidence is present for this bounded claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-08-27T18:09:02.177Z
Resolution: None

Evidence supportedfactor_b_epss

Eligible evidence is present for this bounded claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-08-27T18:09:02.177Z
Resolution: None

Evidence supportedfactor_c_cvss

Eligible evidence is present for this bounded claim.

Revision: casca-direct-cvss-eligibility-v1
Cutoff: 2026-08-27T18:09:02.177Z
Resolution: None

Source-reported scopefactor_d_breadth

The source assertion is retained, but its canonical identity is unresolved.

Revision: casca-factor-d-obligations-v1
Cutoff: 2026-08-27T18:09:02.177Z
Resolution: Resolve identity

Connections 46

has cited scope1 retained · stored CVE-2021-40449 → Microsoft · Windows Server 2022

8424a6c8-075a-41cd-b9b6-0e48de779847

has cited scope1 retained · stored CVE-2021-40449 → Microsoft · Windows 10 Version 20H2

de47ac39-966e-4b8f-b410-a381f1a9a887

has cited scope1 retained · stored CVE-2021-40449 → Microsoft · Windows Server version 2004

901a1d12-486e-4f7b-8878-8edf1bd18512

has cited scope1 retained · stored CVE-2021-40449 → Microsoft · Windows 10 Version 21H1

f8b193f4-6c2e-45ef-be8c-7a672b775bfb

has cited scope1 retained · stored CVE-2021-40449 → Microsoft · Windows Server 2016

82f1af16-fa2d-4267-87f2-2e7693b3d744

has cited scope1 retained · stored CVE-2021-40449 → Microsoft · Windows Server 2008 Service Pack 2 (Server Core installation)

599fbb7a-88f9-4e36-a60a-ce78dc57602a

has cited scope1 retained · stored CVE-2021-40449 → Microsoft · Windows 8.1

0398e2bf-f1f6-4550-bbd8-3a98a8e6cf69

has cited scope1 retained · stored CVE-2021-40449 → Microsoft · Windows 7

1aa60b22-a139-4d7b-a350-b2a97095b212

has cited scope1 retained · stored CVE-2021-40449 → Microsoft · Windows 10 Version 2004

9883a2c9-a95c-4c61-9f3e-f6acd2826cb8

has cited scope1 retained · stored CVE-2021-40449 → Microsoft · Windows Server 2008 Service Pack 2

1c85bebd-fb3c-490b-9077-96984e1dc5a8

has cited scope1 retained · stored CVE-2021-40449 → Microsoft · Windows Server 2008 R2 Service Pack 1

9a19f5a5-29e3-444e-adc6-224847e2cc13

has cited scope1 retained · stored CVE-2021-40449 → Microsoft · Windows Server 2012

082276e4-8417-4528-9b10-d72b6411cf23

has cited scope1 retained · stored CVE-2021-40449 → Microsoft · Windows Server 2008 Service Pack 2

b675125d-1f74-44b3-8767-3ccd500e1171

has cited scope1 retained · stored CVE-2021-40449 → Microsoft · Windows Server 2012 (Server Core installation)

d3265d05-9141-4a96-b307-78b43b570ab8

has cited scope1 retained · stored CVE-2021-40449 → Microsoft · Windows Server version 20H2

2ad6b57b-1ddb-4cfa-9ab5-da33b81bf356

has cited scope1 retained · stored CVE-2021-40449 → Microsoft · Windows Server 2016 (Server Core installation)

f5a67761-ad0c-41a7-a3ad-8a3773680917

has cited scope1 retained · stored CVE-2021-40449 → Microsoft · Windows Server 2012 R2 (Server Core installation)

84328d1f-7f73-4ea6-93db-71107f97428d

has cited scope1 retained · stored CVE-2021-40449 → Microsoft · Windows 10 Version 1909

b1f9c49f-f969-4422-9cff-864912f4f3d8

has cited scope1 retained · stored CVE-2021-40449 → Microsoft · Windows 10 Version 1809

3d237bfb-b573-4092-8bd7-d7615944546c

has cited scope1 retained · stored CVE-2021-40449 → Microsoft · Windows 7 Service Pack 1

a036844b-8d2d-45a6-9a0d-ebe1a070667d

has cited scope1 retained · stored CVE-2021-40449 → Microsoft · Windows Server 2008 R2 Service Pack 1 (Server Core installation)

475415dc-9b8f-4d2f-81e5-8a0d4d498f2f

has cited scope1 retained · stored CVE-2021-40449 → Microsoft · Windows 10 Version 1507

72001152-8410-4822-bf55-1b143c088d74

has cited scope1 retained · stored CVE-2021-40449 → Microsoft · Windows 11 version 21H2

f842505c-c541-42a6-bfec-a4a3d174769f

has cited scope1 retained · stored CVE-2021-40449 → Microsoft · Windows Server 2019

61bc0b2c-88d8-44cd-9d78-3cbfd2d5d217

has cited scope1 retained · stored CVE-2021-40449 → Microsoft · Windows 10 Version 1607

26f09393-7429-4af3-9409-25fa5f0672e8

has cited scope1 retained · stored CVE-2021-40449 → Microsoft · Windows Server 2012 R2

0ea0451f-6490-43bf-ae8f-6d29e9f44169

has cited scope1 retained · stored CVE-2021-40449 → Microsoft · Windows Server 2019 (Server Core installation)

6b477872-d2fb-4002-9294-6a73b9deea26

has vulnerable target scope1 retained · stored CVE-2021-40449 → microsoft · windows_server_2016

71d5f04d-7d48-4b14-926b-ce08d8a28230

has vulnerable target scope1 retained · stored CVE-2021-40449 → microsoft · windows_rt_8.1

cb7ae542-cb5f-4f82-b321-2f6e7836d0d4

has vulnerable target scope1 retained · stored CVE-2021-40449 → microsoft · windows_11

54559337-90d8-4bd2-8923-557dc50c18e4

has vulnerable target scope2 retained · stored CVE-2021-40449 → microsoft · windows_server_2008

580062de-8a70-4b14-b692-4ac544352850d67ac451-9eb6-4b76-892e-d5539f6a2c87

has vulnerable target scope1 retained · stored CVE-2021-40449 → microsoft · windows_server_2019

b0a37b60-4288-47c3-8f87-e923e7e13212

has vulnerable target scope1 retained · stored CVE-2021-40449 → microsoft · windows_server_20h2

19fcef47-5249-4ec5-ab57-19cbfb147e7b

has vulnerable target scope1 retained · stored CVE-2021-40449 → microsoft · windows_10_20h2

dd84e81f-7d24-4bd9-90bd-2b839bf26455

has vulnerable target scope1 retained · stored CVE-2021-40449 → microsoft · windows_server_2004

00d6810d-1ad4-480c-a03d-037c2c5aede4

has vulnerable target scope2 retained · stored CVE-2021-40449 → microsoft · windows_server_2012

70fcb5c9-4669-487b-9e5c-1cf08e56176e8465117e-a3f2-4071-a65a-88dcf08a0d5c

has vulnerable target scope1 retained · stored CVE-2021-40449 → microsoft · windows_10_1607

6e8ce48e-4925-4240-af36-d2c5bbd273ca

has vulnerable target scope1 retained · stored CVE-2021-40449 → microsoft · windows_8.1

e9b9b776-ce56-46b2-8753-c0c33b2a8bbd

has vulnerable target scope1 retained · stored CVE-2021-40449 → microsoft · windows_11_21h2

3c1df0fc-8034-4440-994a-2c51992d6d11

has vulnerable target scope1 retained · stored CVE-2021-40449 → microsoft · windows_10_1507

0c8d641c-2e9a-4881-939a-412b4e88fcfc

has vulnerable target scope1 retained · stored CVE-2021-40449 → microsoft · windows_10_2004

fa15eaf5-098a-47a0-b854-570097ae6469

has vulnerable target scope1 retained · stored CVE-2021-40449 → microsoft · windows_10_1809

1238b2f8-fe4d-4f49-95da-faf84d75bf94

has vulnerable target scope1 retained · stored CVE-2021-40449 → microsoft · windows_server_2022

7ffd983c-5b93-45df-9fa1-5bc309d7ac16

has vulnerable target scope1 retained · stored CVE-2021-40449 → microsoft · windows_10_21h1

ccf41be5-ed05-4401-9087-d5a8b4228ef4

has vulnerable target scope1 retained · stored CVE-2021-40449 → microsoft · windows_10_1909

5efcb532-e4d1-4fed-8a23-0e51665929e3

has vulnerable target scope1 retained · stored CVE-2021-40449 → microsoft · windows_7

d4c6974c-9958-4896-a69d-00c6ecccea9f

Focused snapshot evidence neighborhood.

CVEProductSignalSelected / traceVisual proximity carries zero evidence weight.

Data as of

Evidence current through Aug 27, 2026, 6:09 PM UTC · 47 entities · 46 relationships · bounded complete