cve.bz

CVE-2021-32559

6.5 mediumEPSS 1.7%

Medium (6.5) in mhammond pywin32. EPSS 1.7% chance of exploitation in the next 30 days. Fixed in pywin32 301.

An integer overflow exists in pywin32 prior to version b301 when adding an access control entry (ACE) to an access control list (ACL) that would cause the size to be greater than 65535 bytes. An attacker who successfully exploited this vulnerability could crash the vulnerable process.

Severity

CVSS 3.1

6.5 medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
CWE
CWE-190
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-hwfp-hg2m-9vr2PyPIpywin32<301301
PYSEC-2021-112PyPIpywin32<301301

References

Check your stackJSON