Security feed

24 October 2026

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.

Win32k CVE-2014-4113

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2014-4113

Win32k

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2014-4113
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2599 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:21:36 GMT
Publisher date: Wed, 04 May 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Win32k Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system. CISA required action: Apply updates per vendor instructions.

Win32k CVE-2018-8589

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2018-8589

Win32k

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2018-8589
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2593 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:21:31 GMT
Publisher date: Mon, 23 May 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Win32k Privilege Escalation Vulnerability

Win32k.sys in the kernel-mode drivers in Microsoft Windows allows local users to gain privileges or cause denial-of-service (DoS). CISA required action: Apply updates per vendor instructions.

Win32k CVE-2015-2360

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2015-2360

Win32k

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2015-2360
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2528 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:20:03 GMT
Publisher date: Wed, 25 May 2022 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Win32K Privilege Escalation Vulnerability

Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation up to SYSTEM privileges. CISA required action: Apply updates per vendor instructions.

Win32k CVE-2023-29336

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2023-29336

Win32k

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2023-29336
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1331 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:00:32 GMT
Publisher date: Tue, 09 May 2023 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.

Win32k CVE-2016-0165

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2016-0165

Win32k

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2016-0165
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1311 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 20:59:27 GMT
Publisher date: Thu, 22 Jun 2023 00:00:00 GMT

Read the original announcement