Microsoft · Win32k
CVE-2023-29336
Win32k Elevation of Privilege Vulnerability
Exploited in attacks
High 7.8 Attack chance: 41%
What it is
Win32k Elevation of Privilege Vulnerability
CISA: Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation up to SYSTEM privileges.
What to do
Apply updates per vendor instructions.
Deadline for US federal agencies: May 30, 2023
More exploited flaws from Microsoft
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Jun 22, 2023 | Privilege Escalation | Win32k | High 7.8 | 14% |
| May 25, 2022 | Privilege Escalation | Win32k | High 8.8 | 15% |
| May 23, 2022 | Privilege Escalation | Win32k | High 7.8 | 3.0% |
| May 4, 2022 | Privilege Escalation | Win32k | High 7.8 | 87% |
| Apr 25, 2022 | Privilege Escalation | Win32k | High 7.8 | 1.6% |
| Apr 25, 2022 | Privilege Escalation | Win32k | High 7.8 | 1.6% |
| Mar 28, 2022 | Privilege Escalation | Win32k | High 7.8 | 39% |
| Mar 15, 2022 | Memory Corruption | Win32k | High 8.2 | 10% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.