CVE-2013-3660
Microsoft Win32k Privilege Escalation Vulnerability
CVSS
—
Sin CVSS
EPSS
39.6%
p98
KEV
SÍ
28 mar 2022
Exploit Today
80
0-100
Publicado: — · Última mod.: —
39.6%EPSS · 30 días39.6%
2026-06-302026-07-16
Producto
Microsoft / Win32k
Vulnerabilidad
Microsoft Win32k Privilege Escalation Vulnerability
Añadido a KEV
28 mar 2022
Remediar antes de
18 abr 2022
Uso conocido en ransomware
No
Descripción resumida
The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft does not properly initialize a pointer for the next object in a certain list, which allows local users to gain privileges.
Acción requerida
Apply updates per vendor instructions.
Notas
https://nvd.nist.gov/vuln/detail/CVE-2013-3660
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2014-4113—99.7%
KEV—80Microsoft Win32k Privilege Escalation Vulnerability—CVE-2016-7255—99.6%
KEV—80Microsoft Win32k Privilege Escalation Vulnerability—CVE-2021-1732—99.5%
KEV—80Microsoft Win32k Privilege Escalation Vulnerability—CVE-2019-1458—99.4%
KEV—80Microsoft Win32k Privilege Escalation Vulnerability—CVE-2018-8120—99.4%
KEV—80Microsoft Win32k Privilege Escalation Vulnerability—CVE-2018-8453—99.3%
KEV—80Microsoft Win32k Privilege Escalation Vulnerability—