PULSEUnderground Intel

LIVE63signals / 24h

FEED

ransomaurora reclama a Adams Warehouse & Delivery, Inc. · US · Transportationransomthegentlemen reclama a Suhai Segurana Pessoal · BR · Professional Servicesransomthegentlemen reclama a SBI Audiovisual Medinbox · ES · Healthcareransomthegentlemen reclama a Saga University · JP · Educationransomthegentlemen reclama a Netcore Unbxd · IN · Technologyransomthegentlemen reclama a REGiO Nord · DE · Otherransomthegentlemen reclama a Museum Siam · TH · Hospitalityransomthegentlemen reclama a Skin Center · US · Healthcareransomthegentlemen reclama a Thai Ha PCL KASET · TH · Agriculture and Food Productionransomthegentlemen reclama a Inovar Packaging Group · AU · Manufacturingransomthegentlemen reclama a Engineers Ireland · IE · Professional Servicesransomthegentlemen reclama a North Bridge Venture Partners · US · Financial Servicesransomthegentlemen reclama a SONGWOOI · KR · Not Foundransomthegentlemen reclama a Petroleum Telcom Communications · PK · Energy & Utilitiesransomaurora reclama a Adams Warehouse & Delivery, Inc. · US · Transportationransomthegentlemen reclama a Suhai Segurana Pessoal · BR · Professional Servicesransomthegentlemen reclama a SBI Audiovisual Medinbox · ES · Healthcareransomthegentlemen reclama a Saga University · JP · Educationransomthegentlemen reclama a Netcore Unbxd · IN · Technologyransomthegentlemen reclama a REGiO Nord · DE · Otherransomthegentlemen reclama a Museum Siam · TH · Hospitalityransomthegentlemen reclama a Skin Center · US · Healthcareransomthegentlemen reclama a Thai Ha PCL KASET · TH · Agriculture and Food Productionransomthegentlemen reclama a Inovar Packaging Group · AU · Manufacturingransomthegentlemen reclama a Engineers Ireland · IE · Professional Servicesransomthegentlemen reclama a North Bridge Venture Partners · US · Financial Servicesransomthegentlemen reclama a SONGWOOI · KR · Not Foundransomthegentlemen reclama a Petroleum Telcom Communications · PK · Energy & Utilities

CVE Watch—

CVE-2023-29336

Microsoft Win32K Privilege Escalation Vulnerability

CVSS

—

No CVSS

EPSS

41.2%

p99

KEV

YES

May 9, 2023

Exploit Today

80

0-100

Published: — · Last modified: —

EPSS · 30d

40.9%EPSS · 30 days41.2%

2026-09-172026-10-15

KEV catalog record

Product

Microsoft / Win32k

Vulnerability

Microsoft Win32K Privilege Escalation Vulnerability

Added to KEV

May 9, 2023

Remediate by

May 30, 2023

Known ransomware use

No

Summary description

Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation up to SYSTEM privileges.

Required action

Apply updates per vendor instructions.

Notes

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-29336; https://nvd.nist.gov/vuln/detail/CVE-2023-29336

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2022-218827.0 HIG

KEV—80Microsoft Win32k Privilege Escalation Vulnerability62d CVE-2021-17327.8 HIG

KEV—80Microsoft Win32k Privilege Escalation Vulnerability65d CVE-2020-10547.0 HIG

KEV—80Microsoft Win32k Privilege Escalation Vulnerability8d CVE-2019-14587.8 HIG

KEV—80Microsoft Win32k Privilege Escalation Vulnerability65d CVE-2018-84537.8 HIG

KEV—80Microsoft Win32k Privilege Escalation Vulnerability64d CVE-2018-81207.0 HIG

KEV—80Microsoft Win32k Privilege Escalation Vulnerability64d