CVE Watch—

CVE-2010-4398

Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability

CVSS

—

Sin CVSS

EPSS

8.7%

p95

KEV

SÍ

28 mar 2022

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

8.7%EPSS · 30 días8.7%

2026-09-172026-10-15

Ficha del catálogo KEV

Producto

Microsoft / Windows

Vulnerabilidad

Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability

Añadido a KEV

28 mar 2022

Remediar antes de

21 abr 2022

Uso conocido en ransomware

Descripción resumida

Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows allows local users to gain privileges, and bypass the User Account Control (UAC) feature.

Acción requerida

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2010-4398

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-969518.8 ALT

74.0%

KEV—72Microsoft Windows Command Injection Vulnerability8h CVE-2026-858807.8 ALT

89.3%

KEV—77Microsoft Windows Heap-Based Buffer Overflow Vulnerability22d CVE-2026-819637.8 ALT

31.9%

KEV—60Microsoft Windows Link Following Vulnerability37d CVE-2026-322024.3 MED

92.0%

KEV—78Microsoft Windows Protection Mechanism Failure Vulnerability63d CVE-2026-208055.5 MED

94.4%

KEV—78Microsoft Windows Information Disclosure Vulnerability78d CVE-2025-622217.8 ALT

84.4%

KEV—75Microsoft Windows Use After Free Vulnerability21d