CVE-2021-0119 is a vulnerability that was identified in the Windows Win32k component, which is responsible for rendering graphical user interface elements. This vulnerability could allow an attacker to execute arbitrary code with elevated privileges on a targeted system. The flaw was caused by improper handling of objects in memory by the Win32k component. It affects all supported versions of Microsoft Windows, including Windows 10 and Windows Server.
The vulnerability was first reported to Microsoft in January 2021 by researchers from the Chinese security company Qihoo 360. Microsoft issued a patch for the vulnerability as part of its April 2021 Patch Tuesday updates. The exploitability of this vulnerability was rated as "less likely" by Microsoft, but it was still considered a critical vulnerability due to the potential impact of a successful attack.
There have been no known instances of this vulnerability being exploited in the wild at the time of writing. However, it is important for users to ensure that their systems are up-to-date with the latest security patches to mitigate the risk of exploitation. Additionally, users are advised to exercise caution when opening email attachments or clicking on links from unknown sources, as these may be used to deliver malicious payloads that can exploit vulnerabilities like CVE-2021-0119.