CVE Watch—

CVE-2013-3660

Microsoft Win32k Privilege Escalation Vulnerability

CVSS

—

No CVSS

EPSS

39.3%

p99

KEV

YES

Mar 28, 2022

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

39.3%EPSS · 30 days39.6%

2026-09-172026-10-15

KEV catalog record

Product

Microsoft / Win32k

Vulnerability

Microsoft Win32k Privilege Escalation Vulnerability

Added to KEV

Mar 28, 2022

Remediate by

Apr 18, 2022

Known ransomware use

Summary description

The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft does not properly initialize a pointer for the next object in a certain list, which allows local users to gain privileges.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2013-3660

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2022-218827.0 HIG

99.1%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability62d CVE-2021-17327.8 HIG

99.6%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability65d CVE-2020-10547.0 HIG

99.0%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability8d CVE-2019-14587.8 HIG

99.5%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability65d CVE-2018-84537.8 HIG

99.4%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability64d CVE-2018-81207.0 HIG

99.5%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability64d