CVE Watch—

CVE-2013-3660

Microsoft Win32k Privilege Escalation Vulnerability

CVSS

—

Sem CVSS

EPSS

39.3%

p99

KEV

SIM

28 de mar. de 2022

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

39.3%EPSS · 30 dias39.3%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Microsoft / Win32k

Vulnerabilidade

Microsoft Win32k Privilege Escalation Vulnerability

Adicionado ao KEV

28 de mar. de 2022

Corrigir até

18 de abr. de 2022

Uso conhecido em ransomware

Não

Descrição resumida

The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft does not properly initialize a pointer for the next object in a certain list, which allows local users to gain privileges.

Ação necessária

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2013-3660

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2022-218827.0 ALT

99.1%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability83d CVE-2021-17327.8 ALT

99.6%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability86d CVE-2020-10547.0 ALT

99.0%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability29d CVE-2019-14587.8 ALT

99.5%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability86d CVE-2018-84537.8 ALT

99.4%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability85d CVE-2018-81207.0 ALT

99.5%

KEV—80Microsoft Win32k Privilege Escalation Vulnerability85d