CVE-2021-40449 is a high-severity privilege escalation vulnerability in Microsoft Windows Win32k component. It allows an authenticated user to escalate privileges. The vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided.