{"schema_version":"1","data":[{"id":3663,"advisory_id":"0ca21459-06a5-4f90-a1e4-03f24213df97","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0808","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:39:22.239374+00:00","extraction_method":"structured","technologies":["core-kev","win32k"],"cve_ids":["CVE-2019-0808"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains a privilege escalation vulnerability due to the component failing to properly handle objects in memory. Successful exploitation allows an attacker to run code in kernel mode. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-0808","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-0808","aliases":["CVE-2019-0808"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2019-0808","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-0808","dueDate":"2022-05-03","product":"Win32k","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains a privilege escalation vulnerability due to the component failing to properly handle objects in memory. Successful exploitation allows an attacker to run code in kernel mode.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2019-0808","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3657,"advisory_id":"cd0b90c8-c5b6-487c-9aae-039bcddf42ad","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1054","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:38:34.141292+00:00","extraction_method":"structured","technologies":["core-kev","win32k"],"cve_ids":["CVE-2020-1054"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains a privilege escalation vulnerability when the Windows kernel-mode driver fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-1054","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-1054","aliases":["CVE-2020-1054"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2020-1054","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-1054","dueDate":"2022-05-03","product":"Win32k","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains a privilege escalation vulnerability when the Windows kernel-mode driver fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-1054","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3636,"advisory_id":"16211f7e-0dd7-44ff-ad75-5ebc1d934b0b","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0797","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:38:21.621704+00:00","extraction_method":"structured","technologies":["core-kev","win32k"],"cve_ids":["CVE-2019-0797"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains a privilege escalation vulnerability when the Win32k component fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-0797","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-0797","aliases":["CVE-2019-0797"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2019-0797","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-0797","dueDate":"2022-05-03","product":"Win32k","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains a privilege escalation vulnerability when the Win32k component fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2019-0797","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3631,"advisory_id":"eecb1cf3-4bb4-4004-9a4b-3fe9e21a7072","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0859","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:38:18.605001+00:00","extraction_method":"structured","technologies":["core-kev","win32k"],"cve_ids":["CVE-2019-0859"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k fails to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-0859","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-0859","aliases":["CVE-2019-0859"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2019-0859","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-0859","dueDate":"2022-05-03","product":"Win32k","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k fails to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2019-0859","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3627,"advisory_id":"17ae7fda-e7b8-4d8f-9249-01285d3f4edf","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-28310","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:38:15.860197+00:00","extraction_method":"structured","technologies":["core-kev","win32k"],"cve_ids":["CVE-2021-28310"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Windows Win32k contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-28310","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-28310","aliases":["CVE-2021-28310"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2021-28310","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-28310","dueDate":"2021-11-17","product":"Win32k","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Windows Win32k contains an unspecified vulnerability that allows for privilege escalation.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-28310","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3626,"advisory_id":"11037451-e033-45b3-9f24-58007361fee3","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0803","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:38:15.081302+00:00","extraction_method":"structured","technologies":["core-kev","win32k"],"cve_ids":["CVE-2019-0803"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains an unspecified vulnerability due to it failing to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-0803","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-0803","aliases":["CVE-2019-0803"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2019-0803","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-0803","dueDate":"2022-05-03","product":"Win32k","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains an unspecified vulnerability due to it failing to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2019-0803","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3622,"advisory_id":"6d63c8f5-ca96-44ea-9504-62aee8d76a1b","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1732","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:38:12.787614+00:00","extraction_method":"structured","technologies":["core-kev","win32k"],"cve_ids":["CVE-2021-1732"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-1732","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-1732","aliases":["CVE-2021-1732"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2021-1732","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-1732","dueDate":"2021-11-17","product":"Win32k","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-1732","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3618,"advisory_id":"4bd2c68f-f480-49a4-84e1-6abba8ea4558","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7255","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:38:10.461842+00:00","extraction_method":"structured","technologies":["core-kev","win32k"],"cve_ids":["CVE-2016-7255"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k kernel-mode driver fails to properly handle objects in memory which allows for privilege escalation. Successful exploitation allows an attacker to run code in kernel mode. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2016-7255","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-7255","aliases":["CVE-2016-7255"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-264"],"cveID":"CVE-2016-7255","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-7255","dueDate":"2022-05-03","product":"Win32k","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k kernel-mode driver fails to properly handle objects in memory which allows for privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2016-7255","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3594,"advisory_id":"215f5617-a1c5-43a9-a09c-b957dd0adf07","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0167","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:37:56.023446+00:00","extraction_method":"structured","technologies":["core-kev","win32k"],"cve_ids":["CVE-2016-0167"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation via a crafted application CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2016-0167","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-0167","aliases":["CVE-2016-0167"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-264"],"cveID":"CVE-2016-0167","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-0167","dueDate":"2022-05-03","product":"Win32k","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation via a crafted application","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2016-0167","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2933,"advisory_id":"5ba4c4e4-6bf5-4c3e-9637-3d75a6480aef","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1458","source_published_at":"2022-01-10T00:00:00+00:00","published_at":"2026-10-24T21:26:35.233925+00:00","extraction_method":"structured","technologies":["core-kev","win32k"],"cve_ids":["CVE-2019-1458"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EoP. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-1458","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-1458","aliases":["CVE-2019-1458"],"affected":[],"modified":"2022-01-10T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2019-1458","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1458","dueDate":"2022-07-10","product":"Win32k","dateAdded":"2022-01-10","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EoP.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2019-1458","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2915,"advisory_id":"bf4508c1-e14e-4fb0-95bc-fc84a2317e63","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8453","source_published_at":"2022-01-21T00:00:00+00:00","published_at":"2026-10-24T21:26:24.414193+00:00","extraction_method":"structured","technologies":["core-kev","win32k"],"cve_ids":["CVE-2018-8453"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Windows Win32k contains a vulnerability that allows an attacker to escalate privileges. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2018-8453","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-8453","aliases":["CVE-2018-8453"],"affected":[],"modified":"2022-01-21T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-404"],"cveID":"CVE-2018-8453","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-8453","dueDate":"2022-07-21","product":"Win32k","dateAdded":"2022-01-21","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Windows Win32k contains a vulnerability that allows an attacker to escalate privileges.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2018-8453","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2904,"advisory_id":"d31d62e6-e243-43b9-9692-daef40ec16fd","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-21882","source_published_at":"2022-02-04T00:00:00+00:00","published_at":"2026-10-24T21:26:19.070374+00:00","extraction_method":"structured","technologies":["core-kev","win32k"],"cve_ids":["CVE-2022-21882"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-21882","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-21882","aliases":["CVE-2022-21882"],"affected":[],"modified":"2022-02-04T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2022-21882","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-21882","dueDate":"2022-02-18","product":"Win32k","dateAdded":"2022-02-04","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2022-21882","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2895,"advisory_id":"4feb4d58-9b25-4c4f-8a65-c99f7eb13d01","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0263","source_published_at":"2022-02-10T00:00:00+00:00","published_at":"2026-10-24T21:26:13.762181+00:00","extraction_method":"structured","technologies":["core-kev","win32k"],"cve_ids":["CVE-2017-0263"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains a privilege escalation vulnerability due to the Windows kernel-mode driver failing to properly handle objects in memory. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2017-0263","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2017-0263","aliases":["CVE-2017-0263"],"affected":[],"modified":"2022-02-10T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2017-0263","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-0263","dueDate":"2022-08-10","product":"Win32k","dateAdded":"2022-02-10","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains a privilege escalation vulnerability due to the Windows kernel-mode driver failing to properly handle objects in memory.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2017-0263","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2845,"advisory_id":"655634e1-1471-4430-97bf-8e35d6feb868","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-1701","source_published_at":"2022-03-03T00:00:00+00:00","published_at":"2026-10-24T21:25:40.870183+00:00","extraction_method":"structured","technologies":["core-kev","win32k"],"cve_ids":["CVE-2015-1701"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2015-1701","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-1701","aliases":["CVE-2015-1701"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-264"],"cveID":"CVE-2015-1701","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-1701","dueDate":"2022-03-24","product":"Win32k","dateAdded":"2022-03-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2015-1701","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2766,"advisory_id":"6a49f5e3-0479-41ae-a986-619a62a6888f","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-2546","source_published_at":"2022-03-15T00:00:00+00:00","published_at":"2026-10-24T21:23:59.574706+00:00","extraction_method":"structured","technologies":["core-kev","win32k"],"cve_ids":["CVE-2015-2546"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Win32k Memory Corruption Vulnerability","summary":"The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2015-2546","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-2546","aliases":["CVE-2015-2546"],"affected":[],"modified":"2022-03-15T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2015-2546","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-2546","dueDate":"2022-04-05","product":"Win32k","dateAdded":"2022-03-15","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application.","vulnerabilityName":"Microsoft Win32k Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2015-2546","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2763,"advisory_id":"29b9f74b-2e42-4164-b9c1-e78eb8fd570a","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8120","source_published_at":"2022-03-15T00:00:00+00:00","published_at":"2026-10-24T21:23:57.86984+00:00","extraction_method":"structured","technologies":["core-kev","win32k"],"cve_ids":["CVE-2018-8120"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2018-8120","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-8120","aliases":["CVE-2018-8120"],"affected":[],"modified":"2022-03-15T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-404"],"cveID":"CVE-2018-8120","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-8120","dueDate":"2022-04-05","product":"Win32k","dateAdded":"2022-03-15","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2018-8120","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2758,"advisory_id":"c21ccd42-269a-4f41-9833-bb72850d8ef7","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1132","source_published_at":"2022-03-15T00:00:00+00:00","published_at":"2026-10-24T21:23:55.06511+00:00","extraction_method":"structured","technologies":["core-kev","win32k"],"cve_ids":["CVE-2019-1132"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-1132","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-1132","aliases":["CVE-2019-1132"],"affected":[],"modified":"2022-03-15T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2019-1132","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1132","dueDate":"2022-04-05","product":"Win32k","dateAdded":"2022-03-15","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2019-1132","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2675,"advisory_id":"6d3a5fb5-7f05-438a-909a-26889e792d0e","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-3660","source_published_at":"2022-03-28T00:00:00+00:00","published_at":"2026-10-24T21:22:23.568999+00:00","extraction_method":"structured","technologies":["core-kev","win32k"],"cve_ids":["CVE-2013-3660"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft does not properly initialize a pointer for the next object in a certain list, which allows local users to gain privileges. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2013-3660","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2013-3660","aliases":["CVE-2013-3660"],"affected":[],"modified":"2022-03-28T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2013-3660","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-3660","dueDate":"2022-04-18","product":"Win32k","dateAdded":"2022-03-28","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft does not properly initialize a pointer for the next object in a certain list, which allows local users to gain privileges.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2013-3660","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2607,"advisory_id":"df6f3cb4-2def-4be9-8fc3-622683e1ef6c","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-40450","source_published_at":"2022-04-25T00:00:00+00:00","published_at":"2026-10-24T21:21:42.082828+00:00","extraction_method":"structured","technologies":["core-kev","win32k"],"cve_ids":["CVE-2021-40450"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-40450","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-40450","aliases":["CVE-2021-40450"],"affected":[],"modified":"2022-04-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2021-40450","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-40450","dueDate":"2022-05-16","product":"Win32k","dateAdded":"2022-04-25","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-40450","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2606,"advisory_id":"82878072-98c7-4e20-8034-3423b499a0ce","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-41357","source_published_at":"2022-04-25T00:00:00+00:00","published_at":"2026-10-24T21:21:41.332479+00:00","extraction_method":"structured","technologies":["core-kev","win32k"],"cve_ids":["CVE-2021-41357"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-41357","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-41357","aliases":["CVE-2021-41357"],"affected":[],"modified":"2022-04-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2021-41357","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-41357","dueDate":"2022-05-16","product":"Win32k","dateAdded":"2022-04-25","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-41357","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2599,"advisory_id":"01ef2dc5-7430-48c9-87e4-5848830323e3","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-4113","source_published_at":"2022-05-04T00:00:00+00:00","published_at":"2026-10-24T21:21:36.098794+00:00","extraction_method":"structured","technologies":["core-kev","win32k"],"cve_ids":["CVE-2014-4113"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2014-4113","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2014-4113","aliases":["CVE-2014-4113"],"affected":[],"modified":"2022-05-04T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-264"],"cveID":"CVE-2014-4113","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-4113","dueDate":"2022-05-25","product":"Win32k","dateAdded":"2022-05-04","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2014-4113","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2593,"advisory_id":"7866934a-50b6-40d3-b368-42a57dd25573","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8589","source_published_at":"2022-05-23T00:00:00+00:00","published_at":"2026-10-24T21:21:31.528876+00:00","extraction_method":"structured","technologies":["core-kev","win32k"],"cve_ids":["CVE-2018-8589"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2018-8589","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-8589","aliases":["CVE-2018-8589"],"affected":[],"modified":"2022-05-23T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2018-8589","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-8589","dueDate":"2022-06-13","product":"Win32k","dateAdded":"2022-05-23","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2018-8589","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2528,"advisory_id":"861a26d4-5229-417b-8297-f4244cc7cd6a","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-2360","source_published_at":"2022-05-25T00:00:00+00:00","published_at":"2026-10-24T21:20:03.189363+00:00","extraction_method":"structured","technologies":["core-kev","win32k"],"cve_ids":["CVE-2015-2360"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Win32k.sys in the kernel-mode drivers in Microsoft Windows allows local users to gain privileges or cause denial-of-service (DoS). CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2015-2360","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-2360","aliases":["CVE-2015-2360"],"affected":[],"modified":"2022-05-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2015-2360","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-2360","dueDate":"2022-06-15","product":"Win32k","dateAdded":"2022-05-25","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Win32k.sys in the kernel-mode drivers in Microsoft Windows allows local users to gain privileges or cause denial-of-service (DoS).","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-2360","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1331,"advisory_id":"f09f02c5-8cc5-4409-a2e8-5acf506ae351","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-29336","source_published_at":"2023-05-09T00:00:00+00:00","published_at":"2026-10-24T21:00:32.419383+00:00","extraction_method":"structured","technologies":["core-kev","win32k"],"cve_ids":["CVE-2023-29336"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Win32K Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation up to SYSTEM privileges. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2023-29336","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-29336","aliases":["CVE-2023-29336"],"affected":[],"modified":"2023-05-09T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2023-29336","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-29336; https://nvd.nist.gov/vuln/detail/CVE-2023-29336","dueDate":"2023-05-30","product":"Win32k","dateAdded":"2023-05-09","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation up to SYSTEM privileges.","vulnerabilityName":"Microsoft Win32K Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2023-29336","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1311,"advisory_id":"b4f2ecac-ea98-493a-bf57-194f7d464116","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0165","source_published_at":"2023-06-22T00:00:00+00:00","published_at":"2026-10-24T20:59:27.45324+00:00","extraction_method":"structured","technologies":["core-kev","win32k"],"cve_ids":["CVE-2016-0165"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2016-0165","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-0165","aliases":["CVE-2016-0165"],"affected":[],"modified":"2023-06-22T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-264"],"cveID":"CVE-2016-0165","notes":"https://learn.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-039; https://nvd.nist.gov/vuln/detail/CVE-2016-0165","dueDate":"2023-07-13","product":"Win32k","dateAdded":"2023-06-22","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2016-0165","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}}],"next_after":3663,"next_before":1311}