{"schema_version":"2","view":"grouped","data":[{"id":3646,"cve_ids":["CVE-2019-0808"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains a privilege escalation vulnerability due to the component failing to properly handle objects in memory. Successful exploitation allows an attacker to run code in kernel mode. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-0808","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-0808","aliases":["CVE-2019-0808"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2019-0808","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-0808","dueDate":"2022-05-03","product":"Win32k","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains a privilege escalation vulnerability due to the component failing to properly handle objects in memory. Successful exploitation allows an attacker to run code in kernel mode.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2019-0808","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0ca21459-06a5-4f90-a1e4-03f24213df97","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0808","advisory_id":"0ca21459-06a5-4f90-a1e4-03f24213df97","event_types":["advisory"],"published_at":"2026-10-24T21:39:22.239374+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/advisories/advisory%3A0ca21459-06a5-4f90-a1e4-03f24213df97","group":{"id":"advisory:0ca21459-06a5-4f90-a1e4-03f24213df97","revision":1,"primary_event_id":3663,"change":"published","superseded_by":[],"changed":{"id":3663,"cve_ids":["CVE-2019-0808"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains a privilege escalation vulnerability due to the component failing to properly handle objects in memory. Successful exploitation allows an attacker to run code in kernel mode. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-0808","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-0808","aliases":["CVE-2019-0808"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2019-0808","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-0808","dueDate":"2022-05-03","product":"Win32k","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains a privilege escalation vulnerability due to the component failing to properly handle objects in memory. Successful exploitation allows an attacker to run code in kernel mode.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2019-0808","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0ca21459-06a5-4f90-a1e4-03f24213df97","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0808","advisory_id":"0ca21459-06a5-4f90-a1e4-03f24213df97","event_types":["advisory"],"published_at":"2026-10-24T21:39:22.239374+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3663"},"members":[{"id":3663,"cve_ids":["CVE-2019-0808"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains a privilege escalation vulnerability due to the component failing to properly handle objects in memory. Successful exploitation allows an attacker to run code in kernel mode. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-0808","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-0808","aliases":["CVE-2019-0808"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2019-0808","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-0808","dueDate":"2022-05-03","product":"Win32k","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains a privilege escalation vulnerability due to the component failing to properly handle objects in memory. Successful exploitation allows an attacker to run code in kernel mode.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2019-0808","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0ca21459-06a5-4f90-a1e4-03f24213df97","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0808","advisory_id":"0ca21459-06a5-4f90-a1e4-03f24213df97","event_types":["advisory"],"published_at":"2026-10-24T21:39:22.239374+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3663"}]}},{"id":3640,"cve_ids":["CVE-2020-1054"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains a privilege escalation vulnerability when the Windows kernel-mode driver fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-1054","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-1054","aliases":["CVE-2020-1054"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2020-1054","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-1054","dueDate":"2022-05-03","product":"Win32k","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains a privilege escalation vulnerability when the Windows kernel-mode driver fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-1054","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:cd0b90c8-c5b6-487c-9aae-039bcddf42ad","priority":{"reasons":["linked_severity","known_exploited"],"severity":"high","linked_cves":[{"cve":"CVE-2020-1054","metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"products":[{"name":{"value":"Windows 10 Version 1507","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 10 Version 1607","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 10 Version 1709","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 10 Version 1709 for 32-bit Systems","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 10 Version 1803","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 10 Version 1809","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 10 Version 1809","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 10 Version 1903 for 32-bit Systems","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 10 Version 1903 for ARM64-based Systems","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 10 Version 1903 for x64-based Systems","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 10 Version 1909","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 7","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 7 Service Pack 1","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 8.1","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2008 R2 Service Pack 1","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2008 R2 Service Pack 1 (Server Core installation)","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2008 Service Pack 2","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2008 Service Pack 2 (Server Core installation)","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2012","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2012 (Server Core installation)","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2012 R2","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2012 R2 (Server Core installation)","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2016","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2016 (Server Core installation)","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2019","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2019 (Server Core installation)","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server, version 1803  (Server Core Installation)","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server, version 1903 (Server Core installation)","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server, version 1909 (Server Core installation)","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2020-1054","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveID"}],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1054","advisory_id":"cd0b90c8-c5b6-487c-9aae-039bcddf42ad","event_types":["advisory"],"published_at":"2026-10-24T21:38:34.141292+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/advisories/advisory%3Acd0b90c8-c5b6-487c-9aae-039bcddf42ad","group":{"id":"advisory:cd0b90c8-c5b6-487c-9aae-039bcddf42ad","revision":1,"primary_event_id":3657,"change":"published","superseded_by":[],"changed":{"id":3657,"cve_ids":["CVE-2020-1054"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains a privilege escalation vulnerability when the Windows kernel-mode driver fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-1054","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-1054","aliases":["CVE-2020-1054"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2020-1054","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-1054","dueDate":"2022-05-03","product":"Win32k","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains a privilege escalation vulnerability when the Windows kernel-mode driver fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-1054","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:cd0b90c8-c5b6-487c-9aae-039bcddf42ad","priority":{"reasons":["linked_severity","known_exploited"],"severity":"high","linked_cves":[{"cve":"CVE-2020-1054","metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"products":[{"name":{"value":"Windows 10 Version 1507","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 10 Version 1607","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 10 Version 1709","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 10 Version 1709 for 32-bit Systems","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 10 Version 1803","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 10 Version 1809","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 10 Version 1809","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 10 Version 1903 for 32-bit Systems","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 10 Version 1903 for ARM64-based Systems","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 10 Version 1903 for x64-based Systems","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 10 Version 1909","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 7","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 7 Service Pack 1","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 8.1","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2008 R2 Service Pack 1","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2008 R2 Service Pack 1 (Server Core installation)","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2008 Service Pack 2","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2008 Service Pack 2 (Server Core installation)","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2012","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2012 (Server Core installation)","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2012 R2","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2012 R2 (Server Core installation)","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2016","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2016 (Server Core installation)","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2019","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2019 (Server Core installation)","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server, version 1803  (Server Core Installation)","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server, version 1903 (Server Core installation)","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server, version 1909 (Server Core installation)","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2020-1054","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveID"}],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1054","advisory_id":"cd0b90c8-c5b6-487c-9aae-039bcddf42ad","event_types":["advisory"],"published_at":"2026-10-24T21:38:34.141292+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3657"},"members":[{"id":3657,"cve_ids":["CVE-2020-1054"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains a privilege escalation vulnerability when the Windows kernel-mode driver fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-1054","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-1054","aliases":["CVE-2020-1054"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2020-1054","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-1054","dueDate":"2022-05-03","product":"Win32k","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains a privilege escalation vulnerability when the Windows kernel-mode driver fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-1054","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:cd0b90c8-c5b6-487c-9aae-039bcddf42ad","priority":{"reasons":["linked_severity","known_exploited"],"severity":"high","linked_cves":[{"cve":"CVE-2020-1054","metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":7,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},"scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"products":[{"name":{"value":"Windows 10 Version 1507","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 10 Version 1607","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 10 Version 1709","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 10 Version 1709 for 32-bit Systems","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 10 Version 1803","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 10 Version 1809","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 10 Version 1809","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 10 Version 1903 for 32-bit Systems","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 10 Version 1903 for ARM64-based Systems","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 10 Version 1903 for x64-based Systems","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 10 Version 1909","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 7","evidence":"/containers/cna/affected/11/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 7 Service Pack 1","evidence":"/containers/cna/affected/12/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows 8.1","evidence":"/containers/cna/affected/13/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2008 R2 Service Pack 1","evidence":"/containers/cna/affected/14/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2008 R2 Service Pack 1 (Server Core installation)","evidence":"/containers/cna/affected/15/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2008 Service Pack 2","evidence":"/containers/cna/affected/16/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2008 Service Pack 2 (Server Core installation)","evidence":"/containers/cna/affected/17/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2012","evidence":"/containers/cna/affected/18/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2012 (Server Core installation)","evidence":"/containers/cna/affected/19/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2012 R2","evidence":"/containers/cna/affected/20/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2012 R2 (Server Core installation)","evidence":"/containers/cna/affected/21/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2016","evidence":"/containers/cna/affected/22/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2016 (Server Core installation)","evidence":"/containers/cna/affected/23/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2019","evidence":"/containers/cna/affected/24/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server 2019 (Server Core installation)","evidence":"/containers/cna/affected/25/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server, version 1803  (Server Core Installation)","evidence":"/containers/cna/affected/26/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server, version 1903 (Server Core installation)","evidence":"/containers/cna/affected/27/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Windows Server, version 1909 (Server Core installation)","evidence":"/containers/cna/affected/28/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2020-1054","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveID"}],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1054","advisory_id":"cd0b90c8-c5b6-487c-9aae-039bcddf42ad","event_types":["advisory"],"published_at":"2026-10-24T21:38:34.141292+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3657"}]}},{"id":3619,"cve_ids":["CVE-2019-0797"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains a privilege escalation vulnerability when the Win32k component fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-0797","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-0797","aliases":["CVE-2019-0797"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2019-0797","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-0797","dueDate":"2022-05-03","product":"Win32k","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains a privilege escalation vulnerability when the Win32k component fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2019-0797","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:16211f7e-0dd7-44ff-ad75-5ebc1d934b0b","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0797","advisory_id":"16211f7e-0dd7-44ff-ad75-5ebc1d934b0b","event_types":["advisory"],"published_at":"2026-10-24T21:38:21.621704+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/advisories/advisory%3A16211f7e-0dd7-44ff-ad75-5ebc1d934b0b","group":{"id":"advisory:16211f7e-0dd7-44ff-ad75-5ebc1d934b0b","revision":1,"primary_event_id":3636,"change":"published","superseded_by":[],"changed":{"id":3636,"cve_ids":["CVE-2019-0797"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains a privilege escalation vulnerability when the Win32k component fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-0797","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-0797","aliases":["CVE-2019-0797"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2019-0797","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-0797","dueDate":"2022-05-03","product":"Win32k","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains a privilege escalation vulnerability when the Win32k component fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2019-0797","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:16211f7e-0dd7-44ff-ad75-5ebc1d934b0b","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0797","advisory_id":"16211f7e-0dd7-44ff-ad75-5ebc1d934b0b","event_types":["advisory"],"published_at":"2026-10-24T21:38:21.621704+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3636"},"members":[{"id":3636,"cve_ids":["CVE-2019-0797"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains a privilege escalation vulnerability when the Win32k component fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-0797","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-0797","aliases":["CVE-2019-0797"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2019-0797","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-0797","dueDate":"2022-05-03","product":"Win32k","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains a privilege escalation vulnerability when the Win32k component fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2019-0797","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:16211f7e-0dd7-44ff-ad75-5ebc1d934b0b","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0797","advisory_id":"16211f7e-0dd7-44ff-ad75-5ebc1d934b0b","event_types":["advisory"],"published_at":"2026-10-24T21:38:21.621704+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3636"}]}},{"id":3614,"cve_ids":["CVE-2019-0859"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k fails to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-0859","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-0859","aliases":["CVE-2019-0859"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2019-0859","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-0859","dueDate":"2022-05-03","product":"Win32k","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k fails to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2019-0859","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:eecb1cf3-4bb4-4004-9a4b-3fe9e21a7072","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0859","advisory_id":"eecb1cf3-4bb4-4004-9a4b-3fe9e21a7072","event_types":["advisory"],"published_at":"2026-10-24T21:38:18.605001+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/advisories/advisory%3Aeecb1cf3-4bb4-4004-9a4b-3fe9e21a7072","group":{"id":"advisory:eecb1cf3-4bb4-4004-9a4b-3fe9e21a7072","revision":1,"primary_event_id":3631,"change":"published","superseded_by":[],"changed":{"id":3631,"cve_ids":["CVE-2019-0859"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k fails to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-0859","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-0859","aliases":["CVE-2019-0859"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2019-0859","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-0859","dueDate":"2022-05-03","product":"Win32k","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k fails to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2019-0859","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:eecb1cf3-4bb4-4004-9a4b-3fe9e21a7072","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0859","advisory_id":"eecb1cf3-4bb4-4004-9a4b-3fe9e21a7072","event_types":["advisory"],"published_at":"2026-10-24T21:38:18.605001+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3631"},"members":[{"id":3631,"cve_ids":["CVE-2019-0859"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k fails to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-0859","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-0859","aliases":["CVE-2019-0859"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2019-0859","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-0859","dueDate":"2022-05-03","product":"Win32k","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k fails to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2019-0859","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:eecb1cf3-4bb4-4004-9a4b-3fe9e21a7072","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0859","advisory_id":"eecb1cf3-4bb4-4004-9a4b-3fe9e21a7072","event_types":["advisory"],"published_at":"2026-10-24T21:38:18.605001+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3631"}]}},{"id":3610,"cve_ids":["CVE-2021-28310"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Windows Win32k contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-28310","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-28310","aliases":["CVE-2021-28310"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2021-28310","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-28310","dueDate":"2021-11-17","product":"Win32k","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Windows Win32k contains an unspecified vulnerability that allows for privilege escalation.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-28310","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:17ae7fda-e7b8-4d8f-9249-01285d3f4edf","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-28310","advisory_id":"17ae7fda-e7b8-4d8f-9249-01285d3f4edf","event_types":["advisory"],"published_at":"2026-10-24T21:38:15.860197+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/advisories/advisory%3A17ae7fda-e7b8-4d8f-9249-01285d3f4edf","group":{"id":"advisory:17ae7fda-e7b8-4d8f-9249-01285d3f4edf","revision":1,"primary_event_id":3627,"change":"published","superseded_by":[],"changed":{"id":3627,"cve_ids":["CVE-2021-28310"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Windows Win32k contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-28310","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-28310","aliases":["CVE-2021-28310"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2021-28310","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-28310","dueDate":"2021-11-17","product":"Win32k","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Windows Win32k contains an unspecified vulnerability that allows for privilege escalation.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-28310","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:17ae7fda-e7b8-4d8f-9249-01285d3f4edf","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-28310","advisory_id":"17ae7fda-e7b8-4d8f-9249-01285d3f4edf","event_types":["advisory"],"published_at":"2026-10-24T21:38:15.860197+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3627"},"members":[{"id":3627,"cve_ids":["CVE-2021-28310"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Windows Win32k contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-28310","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-28310","aliases":["CVE-2021-28310"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2021-28310","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-28310","dueDate":"2021-11-17","product":"Win32k","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Windows Win32k contains an unspecified vulnerability that allows for privilege escalation.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-28310","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:17ae7fda-e7b8-4d8f-9249-01285d3f4edf","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-28310","advisory_id":"17ae7fda-e7b8-4d8f-9249-01285d3f4edf","event_types":["advisory"],"published_at":"2026-10-24T21:38:15.860197+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3627"}]}},{"id":3609,"cve_ids":["CVE-2019-0803"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains an unspecified vulnerability due to it failing to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-0803","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-0803","aliases":["CVE-2019-0803"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2019-0803","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-0803","dueDate":"2022-05-03","product":"Win32k","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains an unspecified vulnerability due to it failing to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2019-0803","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:11037451-e033-45b3-9f24-58007361fee3","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0803","advisory_id":"11037451-e033-45b3-9f24-58007361fee3","event_types":["advisory"],"published_at":"2026-10-24T21:38:15.081302+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/advisories/advisory%3A11037451-e033-45b3-9f24-58007361fee3","group":{"id":"advisory:11037451-e033-45b3-9f24-58007361fee3","revision":1,"primary_event_id":3626,"change":"published","superseded_by":[],"changed":{"id":3626,"cve_ids":["CVE-2019-0803"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains an unspecified vulnerability due to it failing to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-0803","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-0803","aliases":["CVE-2019-0803"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2019-0803","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-0803","dueDate":"2022-05-03","product":"Win32k","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains an unspecified vulnerability due to it failing to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2019-0803","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:11037451-e033-45b3-9f24-58007361fee3","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0803","advisory_id":"11037451-e033-45b3-9f24-58007361fee3","event_types":["advisory"],"published_at":"2026-10-24T21:38:15.081302+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3626"},"members":[{"id":3626,"cve_ids":["CVE-2019-0803"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains an unspecified vulnerability due to it failing to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-0803","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-0803","aliases":["CVE-2019-0803"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2019-0803","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-0803","dueDate":"2022-05-03","product":"Win32k","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains an unspecified vulnerability due to it failing to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2019-0803","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:11037451-e033-45b3-9f24-58007361fee3","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-0803","advisory_id":"11037451-e033-45b3-9f24-58007361fee3","event_types":["advisory"],"published_at":"2026-10-24T21:38:15.081302+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3626"}]}},{"id":3605,"cve_ids":["CVE-2021-1732"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-1732","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-1732","aliases":["CVE-2021-1732"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2021-1732","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-1732","dueDate":"2021-11-17","product":"Win32k","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-1732","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:6d63c8f5-ca96-44ea-9504-62aee8d76a1b","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1732","advisory_id":"6d63c8f5-ca96-44ea-9504-62aee8d76a1b","event_types":["advisory"],"published_at":"2026-10-24T21:38:12.787614+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/advisories/advisory%3A6d63c8f5-ca96-44ea-9504-62aee8d76a1b","group":{"id":"advisory:6d63c8f5-ca96-44ea-9504-62aee8d76a1b","revision":1,"primary_event_id":3622,"change":"published","superseded_by":[],"changed":{"id":3622,"cve_ids":["CVE-2021-1732"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-1732","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-1732","aliases":["CVE-2021-1732"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2021-1732","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-1732","dueDate":"2021-11-17","product":"Win32k","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-1732","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:6d63c8f5-ca96-44ea-9504-62aee8d76a1b","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1732","advisory_id":"6d63c8f5-ca96-44ea-9504-62aee8d76a1b","event_types":["advisory"],"published_at":"2026-10-24T21:38:12.787614+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3622"},"members":[{"id":3622,"cve_ids":["CVE-2021-1732"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-1732","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-1732","aliases":["CVE-2021-1732"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2021-1732","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-1732","dueDate":"2021-11-17","product":"Win32k","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-1732","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:6d63c8f5-ca96-44ea-9504-62aee8d76a1b","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1732","advisory_id":"6d63c8f5-ca96-44ea-9504-62aee8d76a1b","event_types":["advisory"],"published_at":"2026-10-24T21:38:12.787614+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3622"}]}},{"id":3601,"cve_ids":["CVE-2016-7255"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k kernel-mode driver fails to properly handle objects in memory which allows for privilege escalation. Successful exploitation allows an attacker to run code in kernel mode. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2016-7255","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-7255","aliases":["CVE-2016-7255"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-264"],"cveID":"CVE-2016-7255","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-7255","dueDate":"2022-05-03","product":"Win32k","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k kernel-mode driver fails to properly handle objects in memory which allows for privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2016-7255","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4bd2c68f-f480-49a4-84e1-6abba8ea4558","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7255","advisory_id":"4bd2c68f-f480-49a4-84e1-6abba8ea4558","event_types":["advisory"],"published_at":"2026-10-24T21:38:10.461842+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/advisories/advisory%3A4bd2c68f-f480-49a4-84e1-6abba8ea4558","group":{"id":"advisory:4bd2c68f-f480-49a4-84e1-6abba8ea4558","revision":1,"primary_event_id":3618,"change":"published","superseded_by":[],"changed":{"id":3618,"cve_ids":["CVE-2016-7255"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k kernel-mode driver fails to properly handle objects in memory which allows for privilege escalation. Successful exploitation allows an attacker to run code in kernel mode. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2016-7255","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-7255","aliases":["CVE-2016-7255"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-264"],"cveID":"CVE-2016-7255","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-7255","dueDate":"2022-05-03","product":"Win32k","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k kernel-mode driver fails to properly handle objects in memory which allows for privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2016-7255","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4bd2c68f-f480-49a4-84e1-6abba8ea4558","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7255","advisory_id":"4bd2c68f-f480-49a4-84e1-6abba8ea4558","event_types":["advisory"],"published_at":"2026-10-24T21:38:10.461842+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3618"},"members":[{"id":3618,"cve_ids":["CVE-2016-7255"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k kernel-mode driver fails to properly handle objects in memory which allows for privilege escalation. Successful exploitation allows an attacker to run code in kernel mode. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2016-7255","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-7255","aliases":["CVE-2016-7255"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-264"],"cveID":"CVE-2016-7255","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-7255","dueDate":"2022-05-03","product":"Win32k","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k kernel-mode driver fails to properly handle objects in memory which allows for privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2016-7255","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4bd2c68f-f480-49a4-84e1-6abba8ea4558","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-7255","advisory_id":"4bd2c68f-f480-49a4-84e1-6abba8ea4558","event_types":["advisory"],"published_at":"2026-10-24T21:38:10.461842+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3618"}]}},{"id":3577,"cve_ids":["CVE-2016-0167"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation via a crafted application CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2016-0167","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-0167","aliases":["CVE-2016-0167"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-264"],"cveID":"CVE-2016-0167","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-0167","dueDate":"2022-05-03","product":"Win32k","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation via a crafted application","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2016-0167","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:215f5617-a1c5-43a9-a09c-b957dd0adf07","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0167","advisory_id":"215f5617-a1c5-43a9-a09c-b957dd0adf07","event_types":["advisory"],"published_at":"2026-10-24T21:37:56.023446+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/advisories/advisory%3A215f5617-a1c5-43a9-a09c-b957dd0adf07","group":{"id":"advisory:215f5617-a1c5-43a9-a09c-b957dd0adf07","revision":1,"primary_event_id":3594,"change":"published","superseded_by":[],"changed":{"id":3594,"cve_ids":["CVE-2016-0167"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation via a crafted application CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2016-0167","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-0167","aliases":["CVE-2016-0167"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-264"],"cveID":"CVE-2016-0167","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-0167","dueDate":"2022-05-03","product":"Win32k","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation via a crafted application","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2016-0167","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:215f5617-a1c5-43a9-a09c-b957dd0adf07","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0167","advisory_id":"215f5617-a1c5-43a9-a09c-b957dd0adf07","event_types":["advisory"],"published_at":"2026-10-24T21:37:56.023446+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3594"},"members":[{"id":3594,"cve_ids":["CVE-2016-0167"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation via a crafted application CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2016-0167","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-0167","aliases":["CVE-2016-0167"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-264"],"cveID":"CVE-2016-0167","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-0167","dueDate":"2022-05-03","product":"Win32k","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation via a crafted application","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2016-0167","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:215f5617-a1c5-43a9-a09c-b957dd0adf07","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0167","advisory_id":"215f5617-a1c5-43a9-a09c-b957dd0adf07","event_types":["advisory"],"published_at":"2026-10-24T21:37:56.023446+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3594"}]}},{"id":2928,"cve_ids":["CVE-2019-1458"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EoP. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-1458","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-1458","aliases":["CVE-2019-1458"],"affected":[],"modified":"2022-01-10T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2019-1458","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1458","dueDate":"2022-07-10","product":"Win32k","dateAdded":"2022-01-10","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EoP.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2019-1458","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:5ba4c4e4-6bf5-4c3e-9637-3d75a6480aef","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1458","advisory_id":"5ba4c4e4-6bf5-4c3e-9637-3d75a6480aef","event_types":["advisory"],"published_at":"2026-10-24T21:26:35.233925+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-01-10T00:00:00+00:00","detail_url":"/advisories/advisory%3A5ba4c4e4-6bf5-4c3e-9637-3d75a6480aef","group":{"id":"advisory:5ba4c4e4-6bf5-4c3e-9637-3d75a6480aef","revision":1,"primary_event_id":2933,"change":"published","superseded_by":[],"changed":{"id":2933,"cve_ids":["CVE-2019-1458"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EoP. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-1458","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-1458","aliases":["CVE-2019-1458"],"affected":[],"modified":"2022-01-10T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2019-1458","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1458","dueDate":"2022-07-10","product":"Win32k","dateAdded":"2022-01-10","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EoP.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2019-1458","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:5ba4c4e4-6bf5-4c3e-9637-3d75a6480aef","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1458","advisory_id":"5ba4c4e4-6bf5-4c3e-9637-3d75a6480aef","event_types":["advisory"],"published_at":"2026-10-24T21:26:35.233925+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-01-10T00:00:00+00:00","detail_url":"/events/2933"},"members":[{"id":2933,"cve_ids":["CVE-2019-1458"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EoP. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-1458","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-1458","aliases":["CVE-2019-1458"],"affected":[],"modified":"2022-01-10T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2019-1458","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1458","dueDate":"2022-07-10","product":"Win32k","dateAdded":"2022-01-10","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EoP.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2019-1458","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:5ba4c4e4-6bf5-4c3e-9637-3d75a6480aef","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1458","advisory_id":"5ba4c4e4-6bf5-4c3e-9637-3d75a6480aef","event_types":["advisory"],"published_at":"2026-10-24T21:26:35.233925+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-01-10T00:00:00+00:00","detail_url":"/events/2933"}]}},{"id":2910,"cve_ids":["CVE-2018-8453"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Windows Win32k contains a vulnerability that allows an attacker to escalate privileges. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2018-8453","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-8453","aliases":["CVE-2018-8453"],"affected":[],"modified":"2022-01-21T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-404"],"cveID":"CVE-2018-8453","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-8453","dueDate":"2022-07-21","product":"Win32k","dateAdded":"2022-01-21","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Windows Win32k contains a vulnerability that allows an attacker to escalate privileges.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2018-8453","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:bf4508c1-e14e-4fb0-95bc-fc84a2317e63","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8453","advisory_id":"bf4508c1-e14e-4fb0-95bc-fc84a2317e63","event_types":["advisory"],"published_at":"2026-10-24T21:26:24.414193+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-01-21T00:00:00+00:00","detail_url":"/advisories/advisory%3Abf4508c1-e14e-4fb0-95bc-fc84a2317e63","group":{"id":"advisory:bf4508c1-e14e-4fb0-95bc-fc84a2317e63","revision":1,"primary_event_id":2915,"change":"published","superseded_by":[],"changed":{"id":2915,"cve_ids":["CVE-2018-8453"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Windows Win32k contains a vulnerability that allows an attacker to escalate privileges. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2018-8453","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-8453","aliases":["CVE-2018-8453"],"affected":[],"modified":"2022-01-21T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-404"],"cveID":"CVE-2018-8453","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-8453","dueDate":"2022-07-21","product":"Win32k","dateAdded":"2022-01-21","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Windows Win32k contains a vulnerability that allows an attacker to escalate privileges.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2018-8453","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:bf4508c1-e14e-4fb0-95bc-fc84a2317e63","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8453","advisory_id":"bf4508c1-e14e-4fb0-95bc-fc84a2317e63","event_types":["advisory"],"published_at":"2026-10-24T21:26:24.414193+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-01-21T00:00:00+00:00","detail_url":"/events/2915"},"members":[{"id":2915,"cve_ids":["CVE-2018-8453"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Windows Win32k contains a vulnerability that allows an attacker to escalate privileges. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2018-8453","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-8453","aliases":["CVE-2018-8453"],"affected":[],"modified":"2022-01-21T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-404"],"cveID":"CVE-2018-8453","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-8453","dueDate":"2022-07-21","product":"Win32k","dateAdded":"2022-01-21","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Windows Win32k contains a vulnerability that allows an attacker to escalate privileges.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2018-8453","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:bf4508c1-e14e-4fb0-95bc-fc84a2317e63","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8453","advisory_id":"bf4508c1-e14e-4fb0-95bc-fc84a2317e63","event_types":["advisory"],"published_at":"2026-10-24T21:26:24.414193+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-01-21T00:00:00+00:00","detail_url":"/events/2915"}]}},{"id":2899,"cve_ids":["CVE-2022-21882"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-21882","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-21882","aliases":["CVE-2022-21882"],"affected":[],"modified":"2022-02-04T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2022-21882","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-21882","dueDate":"2022-02-18","product":"Win32k","dateAdded":"2022-02-04","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2022-21882","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d31d62e6-e243-43b9-9692-daef40ec16fd","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-21882","advisory_id":"d31d62e6-e243-43b9-9692-daef40ec16fd","event_types":["advisory"],"published_at":"2026-10-24T21:26:19.070374+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-02-04T00:00:00+00:00","detail_url":"/advisories/advisory%3Ad31d62e6-e243-43b9-9692-daef40ec16fd","group":{"id":"advisory:d31d62e6-e243-43b9-9692-daef40ec16fd","revision":1,"primary_event_id":2904,"change":"published","superseded_by":[],"changed":{"id":2904,"cve_ids":["CVE-2022-21882"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-21882","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-21882","aliases":["CVE-2022-21882"],"affected":[],"modified":"2022-02-04T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2022-21882","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-21882","dueDate":"2022-02-18","product":"Win32k","dateAdded":"2022-02-04","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2022-21882","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d31d62e6-e243-43b9-9692-daef40ec16fd","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-21882","advisory_id":"d31d62e6-e243-43b9-9692-daef40ec16fd","event_types":["advisory"],"published_at":"2026-10-24T21:26:19.070374+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-02-04T00:00:00+00:00","detail_url":"/events/2904"},"members":[{"id":2904,"cve_ids":["CVE-2022-21882"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-21882","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-21882","aliases":["CVE-2022-21882"],"affected":[],"modified":"2022-02-04T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2022-21882","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-21882","dueDate":"2022-02-18","product":"Win32k","dateAdded":"2022-02-04","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2022-21882","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d31d62e6-e243-43b9-9692-daef40ec16fd","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-21882","advisory_id":"d31d62e6-e243-43b9-9692-daef40ec16fd","event_types":["advisory"],"published_at":"2026-10-24T21:26:19.070374+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-02-04T00:00:00+00:00","detail_url":"/events/2904"}]}},{"id":2890,"cve_ids":["CVE-2017-0263"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains a privilege escalation vulnerability due to the Windows kernel-mode driver failing to properly handle objects in memory. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2017-0263","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2017-0263","aliases":["CVE-2017-0263"],"affected":[],"modified":"2022-02-10T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2017-0263","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-0263","dueDate":"2022-08-10","product":"Win32k","dateAdded":"2022-02-10","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains a privilege escalation vulnerability due to the Windows kernel-mode driver failing to properly handle objects in memory.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2017-0263","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4feb4d58-9b25-4c4f-8a65-c99f7eb13d01","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0263","advisory_id":"4feb4d58-9b25-4c4f-8a65-c99f7eb13d01","event_types":["advisory"],"published_at":"2026-10-24T21:26:13.762181+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-02-10T00:00:00+00:00","detail_url":"/advisories/advisory%3A4feb4d58-9b25-4c4f-8a65-c99f7eb13d01","group":{"id":"advisory:4feb4d58-9b25-4c4f-8a65-c99f7eb13d01","revision":1,"primary_event_id":2895,"change":"published","superseded_by":[],"changed":{"id":2895,"cve_ids":["CVE-2017-0263"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains a privilege escalation vulnerability due to the Windows kernel-mode driver failing to properly handle objects in memory. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2017-0263","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2017-0263","aliases":["CVE-2017-0263"],"affected":[],"modified":"2022-02-10T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2017-0263","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-0263","dueDate":"2022-08-10","product":"Win32k","dateAdded":"2022-02-10","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains a privilege escalation vulnerability due to the Windows kernel-mode driver failing to properly handle objects in memory.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2017-0263","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4feb4d58-9b25-4c4f-8a65-c99f7eb13d01","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0263","advisory_id":"4feb4d58-9b25-4c4f-8a65-c99f7eb13d01","event_types":["advisory"],"published_at":"2026-10-24T21:26:13.762181+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-02-10T00:00:00+00:00","detail_url":"/events/2895"},"members":[{"id":2895,"cve_ids":["CVE-2017-0263"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains a privilege escalation vulnerability due to the Windows kernel-mode driver failing to properly handle objects in memory. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2017-0263","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2017-0263","aliases":["CVE-2017-0263"],"affected":[],"modified":"2022-02-10T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2017-0263","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-0263","dueDate":"2022-08-10","product":"Win32k","dateAdded":"2022-02-10","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains a privilege escalation vulnerability due to the Windows kernel-mode driver failing to properly handle objects in memory.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2017-0263","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4feb4d58-9b25-4c4f-8a65-c99f7eb13d01","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-0263","advisory_id":"4feb4d58-9b25-4c4f-8a65-c99f7eb13d01","event_types":["advisory"],"published_at":"2026-10-24T21:26:13.762181+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-02-10T00:00:00+00:00","detail_url":"/events/2895"}]}},{"id":2838,"cve_ids":["CVE-2015-1701"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2015-1701","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-1701","aliases":["CVE-2015-1701"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-264"],"cveID":"CVE-2015-1701","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-1701","dueDate":"2022-03-24","product":"Win32k","dateAdded":"2022-03-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2015-1701","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:655634e1-1471-4430-97bf-8e35d6feb868","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-1701","advisory_id":"655634e1-1471-4430-97bf-8e35d6feb868","event_types":["advisory"],"published_at":"2026-10-24T21:25:40.870183+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/advisories/advisory%3A655634e1-1471-4430-97bf-8e35d6feb868","group":{"id":"advisory:655634e1-1471-4430-97bf-8e35d6feb868","revision":1,"primary_event_id":2845,"change":"published","superseded_by":[],"changed":{"id":2845,"cve_ids":["CVE-2015-1701"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2015-1701","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-1701","aliases":["CVE-2015-1701"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-264"],"cveID":"CVE-2015-1701","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-1701","dueDate":"2022-03-24","product":"Win32k","dateAdded":"2022-03-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2015-1701","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:655634e1-1471-4430-97bf-8e35d6feb868","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-1701","advisory_id":"655634e1-1471-4430-97bf-8e35d6feb868","event_types":["advisory"],"published_at":"2026-10-24T21:25:40.870183+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/events/2845"},"members":[{"id":2845,"cve_ids":["CVE-2015-1701"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2015-1701","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-1701","aliases":["CVE-2015-1701"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-264"],"cveID":"CVE-2015-1701","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-1701","dueDate":"2022-03-24","product":"Win32k","dateAdded":"2022-03-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2015-1701","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:655634e1-1471-4430-97bf-8e35d6feb868","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-1701","advisory_id":"655634e1-1471-4430-97bf-8e35d6feb868","event_types":["advisory"],"published_at":"2026-10-24T21:25:40.870183+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-03T00:00:00+00:00","detail_url":"/events/2845"}]}},{"id":2759,"cve_ids":["CVE-2015-2546"],"payload":{"kind":"advisory","title":"Microsoft Win32k Memory Corruption Vulnerability","summary":"The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2015-2546","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-2546","aliases":["CVE-2015-2546"],"affected":[],"modified":"2022-03-15T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2015-2546","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-2546","dueDate":"2022-04-05","product":"Win32k","dateAdded":"2022-03-15","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application.","vulnerabilityName":"Microsoft Win32k Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2015-2546","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:6a49f5e3-0479-41ae-a986-619a62a6888f","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-2546","advisory_id":"6a49f5e3-0479-41ae-a986-619a62a6888f","event_types":["advisory"],"published_at":"2026-10-24T21:23:59.574706+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-15T00:00:00+00:00","detail_url":"/advisories/advisory%3A6a49f5e3-0479-41ae-a986-619a62a6888f","group":{"id":"advisory:6a49f5e3-0479-41ae-a986-619a62a6888f","revision":1,"primary_event_id":2766,"change":"published","superseded_by":[],"changed":{"id":2766,"cve_ids":["CVE-2015-2546"],"payload":{"kind":"advisory","title":"Microsoft Win32k Memory Corruption Vulnerability","summary":"The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2015-2546","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-2546","aliases":["CVE-2015-2546"],"affected":[],"modified":"2022-03-15T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2015-2546","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-2546","dueDate":"2022-04-05","product":"Win32k","dateAdded":"2022-03-15","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application.","vulnerabilityName":"Microsoft Win32k Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2015-2546","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:6a49f5e3-0479-41ae-a986-619a62a6888f","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-2546","advisory_id":"6a49f5e3-0479-41ae-a986-619a62a6888f","event_types":["advisory"],"published_at":"2026-10-24T21:23:59.574706+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-15T00:00:00+00:00","detail_url":"/events/2766"},"members":[{"id":2766,"cve_ids":["CVE-2015-2546"],"payload":{"kind":"advisory","title":"Microsoft Win32k Memory Corruption Vulnerability","summary":"The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2015-2546","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-2546","aliases":["CVE-2015-2546"],"affected":[],"modified":"2022-03-15T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2015-2546","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-2546","dueDate":"2022-04-05","product":"Win32k","dateAdded":"2022-03-15","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application.","vulnerabilityName":"Microsoft Win32k Memory Corruption Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2015-2546","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:6a49f5e3-0479-41ae-a986-619a62a6888f","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-2546","advisory_id":"6a49f5e3-0479-41ae-a986-619a62a6888f","event_types":["advisory"],"published_at":"2026-10-24T21:23:59.574706+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-15T00:00:00+00:00","detail_url":"/events/2766"}]}},{"id":2756,"cve_ids":["CVE-2018-8120"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2018-8120","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-8120","aliases":["CVE-2018-8120"],"affected":[],"modified":"2022-03-15T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-404"],"cveID":"CVE-2018-8120","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-8120","dueDate":"2022-04-05","product":"Win32k","dateAdded":"2022-03-15","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2018-8120","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:29b9f74b-2e42-4164-b9c1-e78eb8fd570a","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8120","advisory_id":"29b9f74b-2e42-4164-b9c1-e78eb8fd570a","event_types":["advisory"],"published_at":"2026-10-24T21:23:57.86984+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-15T00:00:00+00:00","detail_url":"/advisories/advisory%3A29b9f74b-2e42-4164-b9c1-e78eb8fd570a","group":{"id":"advisory:29b9f74b-2e42-4164-b9c1-e78eb8fd570a","revision":1,"primary_event_id":2763,"change":"published","superseded_by":[],"changed":{"id":2763,"cve_ids":["CVE-2018-8120"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2018-8120","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-8120","aliases":["CVE-2018-8120"],"affected":[],"modified":"2022-03-15T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-404"],"cveID":"CVE-2018-8120","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-8120","dueDate":"2022-04-05","product":"Win32k","dateAdded":"2022-03-15","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2018-8120","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:29b9f74b-2e42-4164-b9c1-e78eb8fd570a","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8120","advisory_id":"29b9f74b-2e42-4164-b9c1-e78eb8fd570a","event_types":["advisory"],"published_at":"2026-10-24T21:23:57.86984+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-15T00:00:00+00:00","detail_url":"/events/2763"},"members":[{"id":2763,"cve_ids":["CVE-2018-8120"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2018-8120","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-8120","aliases":["CVE-2018-8120"],"affected":[],"modified":"2022-03-15T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-404"],"cveID":"CVE-2018-8120","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-8120","dueDate":"2022-04-05","product":"Win32k","dateAdded":"2022-03-15","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2018-8120","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:29b9f74b-2e42-4164-b9c1-e78eb8fd570a","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8120","advisory_id":"29b9f74b-2e42-4164-b9c1-e78eb8fd570a","event_types":["advisory"],"published_at":"2026-10-24T21:23:57.86984+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-15T00:00:00+00:00","detail_url":"/events/2763"}]}},{"id":2751,"cve_ids":["CVE-2019-1132"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-1132","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-1132","aliases":["CVE-2019-1132"],"affected":[],"modified":"2022-03-15T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2019-1132","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1132","dueDate":"2022-04-05","product":"Win32k","dateAdded":"2022-03-15","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2019-1132","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c21ccd42-269a-4f41-9833-bb72850d8ef7","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1132","advisory_id":"c21ccd42-269a-4f41-9833-bb72850d8ef7","event_types":["advisory"],"published_at":"2026-10-24T21:23:55.06511+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-15T00:00:00+00:00","detail_url":"/advisories/advisory%3Ac21ccd42-269a-4f41-9833-bb72850d8ef7","group":{"id":"advisory:c21ccd42-269a-4f41-9833-bb72850d8ef7","revision":1,"primary_event_id":2758,"change":"published","superseded_by":[],"changed":{"id":2758,"cve_ids":["CVE-2019-1132"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-1132","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-1132","aliases":["CVE-2019-1132"],"affected":[],"modified":"2022-03-15T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2019-1132","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1132","dueDate":"2022-04-05","product":"Win32k","dateAdded":"2022-03-15","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2019-1132","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c21ccd42-269a-4f41-9833-bb72850d8ef7","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1132","advisory_id":"c21ccd42-269a-4f41-9833-bb72850d8ef7","event_types":["advisory"],"published_at":"2026-10-24T21:23:55.06511+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-15T00:00:00+00:00","detail_url":"/events/2758"},"members":[{"id":2758,"cve_ids":["CVE-2019-1132"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-1132","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-1132","aliases":["CVE-2019-1132"],"affected":[],"modified":"2022-03-15T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2019-1132","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1132","dueDate":"2022-04-05","product":"Win32k","dateAdded":"2022-03-15","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2019-1132","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c21ccd42-269a-4f41-9833-bb72850d8ef7","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1132","advisory_id":"c21ccd42-269a-4f41-9833-bb72850d8ef7","event_types":["advisory"],"published_at":"2026-10-24T21:23:55.06511+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-15T00:00:00+00:00","detail_url":"/events/2758"}]}},{"id":2666,"cve_ids":["CVE-2013-3660"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft does not properly initialize a pointer for the next object in a certain list, which allows local users to gain privileges. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2013-3660","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2013-3660","aliases":["CVE-2013-3660"],"affected":[],"modified":"2022-03-28T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2013-3660","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-3660","dueDate":"2022-04-18","product":"Win32k","dateAdded":"2022-03-28","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft does not properly initialize a pointer for the next object in a certain list, which allows local users to gain privileges.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2013-3660","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:6d3a5fb5-7f05-438a-909a-26889e792d0e","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-3660","advisory_id":"6d3a5fb5-7f05-438a-909a-26889e792d0e","event_types":["advisory"],"published_at":"2026-10-24T21:22:23.568999+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-28T00:00:00+00:00","detail_url":"/advisories/advisory%3A6d3a5fb5-7f05-438a-909a-26889e792d0e","group":{"id":"advisory:6d3a5fb5-7f05-438a-909a-26889e792d0e","revision":1,"primary_event_id":2675,"change":"published","superseded_by":[],"changed":{"id":2675,"cve_ids":["CVE-2013-3660"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft does not properly initialize a pointer for the next object in a certain list, which allows local users to gain privileges. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2013-3660","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2013-3660","aliases":["CVE-2013-3660"],"affected":[],"modified":"2022-03-28T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2013-3660","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-3660","dueDate":"2022-04-18","product":"Win32k","dateAdded":"2022-03-28","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft does not properly initialize a pointer for the next object in a certain list, which allows local users to gain privileges.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2013-3660","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:6d3a5fb5-7f05-438a-909a-26889e792d0e","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-3660","advisory_id":"6d3a5fb5-7f05-438a-909a-26889e792d0e","event_types":["advisory"],"published_at":"2026-10-24T21:22:23.568999+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-28T00:00:00+00:00","detail_url":"/events/2675"},"members":[{"id":2675,"cve_ids":["CVE-2013-3660"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft does not properly initialize a pointer for the next object in a certain list, which allows local users to gain privileges. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2013-3660","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2013-3660","aliases":["CVE-2013-3660"],"affected":[],"modified":"2022-03-28T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2013-3660","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-3660","dueDate":"2022-04-18","product":"Win32k","dateAdded":"2022-03-28","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft does not properly initialize a pointer for the next object in a certain list, which allows local users to gain privileges.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2013-3660","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:6d3a5fb5-7f05-438a-909a-26889e792d0e","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-3660","advisory_id":"6d3a5fb5-7f05-438a-909a-26889e792d0e","event_types":["advisory"],"published_at":"2026-10-24T21:22:23.568999+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-28T00:00:00+00:00","detail_url":"/events/2675"}]}},{"id":2597,"cve_ids":["CVE-2021-40450"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-40450","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-40450","aliases":["CVE-2021-40450"],"affected":[],"modified":"2022-04-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2021-40450","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-40450","dueDate":"2022-05-16","product":"Win32k","dateAdded":"2022-04-25","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-40450","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:df6f3cb4-2def-4be9-8fc3-622683e1ef6c","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-40450","advisory_id":"df6f3cb4-2def-4be9-8fc3-622683e1ef6c","event_types":["advisory"],"published_at":"2026-10-24T21:21:42.082828+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-04-25T00:00:00+00:00","detail_url":"/advisories/advisory%3Adf6f3cb4-2def-4be9-8fc3-622683e1ef6c","group":{"id":"advisory:df6f3cb4-2def-4be9-8fc3-622683e1ef6c","revision":1,"primary_event_id":2607,"change":"published","superseded_by":[],"changed":{"id":2607,"cve_ids":["CVE-2021-40450"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-40450","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-40450","aliases":["CVE-2021-40450"],"affected":[],"modified":"2022-04-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2021-40450","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-40450","dueDate":"2022-05-16","product":"Win32k","dateAdded":"2022-04-25","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-40450","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:df6f3cb4-2def-4be9-8fc3-622683e1ef6c","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-40450","advisory_id":"df6f3cb4-2def-4be9-8fc3-622683e1ef6c","event_types":["advisory"],"published_at":"2026-10-24T21:21:42.082828+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-04-25T00:00:00+00:00","detail_url":"/events/2607"},"members":[{"id":2607,"cve_ids":["CVE-2021-40450"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-40450","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-40450","aliases":["CVE-2021-40450"],"affected":[],"modified":"2022-04-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2021-40450","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-40450","dueDate":"2022-05-16","product":"Win32k","dateAdded":"2022-04-25","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-40450","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:df6f3cb4-2def-4be9-8fc3-622683e1ef6c","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-40450","advisory_id":"df6f3cb4-2def-4be9-8fc3-622683e1ef6c","event_types":["advisory"],"published_at":"2026-10-24T21:21:42.082828+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-04-25T00:00:00+00:00","detail_url":"/events/2607"}]}},{"id":2596,"cve_ids":["CVE-2021-41357"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-41357","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-41357","aliases":["CVE-2021-41357"],"affected":[],"modified":"2022-04-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2021-41357","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-41357","dueDate":"2022-05-16","product":"Win32k","dateAdded":"2022-04-25","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-41357","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:82878072-98c7-4e20-8034-3423b499a0ce","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-41357","advisory_id":"82878072-98c7-4e20-8034-3423b499a0ce","event_types":["advisory"],"published_at":"2026-10-24T21:21:41.332479+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-04-25T00:00:00+00:00","detail_url":"/advisories/advisory%3A82878072-98c7-4e20-8034-3423b499a0ce","group":{"id":"advisory:82878072-98c7-4e20-8034-3423b499a0ce","revision":1,"primary_event_id":2606,"change":"published","superseded_by":[],"changed":{"id":2606,"cve_ids":["CVE-2021-41357"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-41357","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-41357","aliases":["CVE-2021-41357"],"affected":[],"modified":"2022-04-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2021-41357","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-41357","dueDate":"2022-05-16","product":"Win32k","dateAdded":"2022-04-25","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-41357","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:82878072-98c7-4e20-8034-3423b499a0ce","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-41357","advisory_id":"82878072-98c7-4e20-8034-3423b499a0ce","event_types":["advisory"],"published_at":"2026-10-24T21:21:41.332479+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-04-25T00:00:00+00:00","detail_url":"/events/2606"},"members":[{"id":2606,"cve_ids":["CVE-2021-41357"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-41357","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-41357","aliases":["CVE-2021-41357"],"affected":[],"modified":"2022-04-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2021-41357","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-41357","dueDate":"2022-05-16","product":"Win32k","dateAdded":"2022-04-25","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-41357","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:82878072-98c7-4e20-8034-3423b499a0ce","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-41357","advisory_id":"82878072-98c7-4e20-8034-3423b499a0ce","event_types":["advisory"],"published_at":"2026-10-24T21:21:41.332479+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-04-25T00:00:00+00:00","detail_url":"/events/2606"}]}},{"id":2589,"cve_ids":["CVE-2014-4113"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2014-4113","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2014-4113","aliases":["CVE-2014-4113"],"affected":[],"modified":"2022-05-04T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-264"],"cveID":"CVE-2014-4113","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-4113","dueDate":"2022-05-25","product":"Win32k","dateAdded":"2022-05-04","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2014-4113","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:01ef2dc5-7430-48c9-87e4-5848830323e3","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-4113","advisory_id":"01ef2dc5-7430-48c9-87e4-5848830323e3","event_types":["advisory"],"published_at":"2026-10-24T21:21:36.098794+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-05-04T00:00:00+00:00","detail_url":"/advisories/advisory%3A01ef2dc5-7430-48c9-87e4-5848830323e3","group":{"id":"advisory:01ef2dc5-7430-48c9-87e4-5848830323e3","revision":1,"primary_event_id":2599,"change":"published","superseded_by":[],"changed":{"id":2599,"cve_ids":["CVE-2014-4113"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2014-4113","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2014-4113","aliases":["CVE-2014-4113"],"affected":[],"modified":"2022-05-04T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-264"],"cveID":"CVE-2014-4113","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-4113","dueDate":"2022-05-25","product":"Win32k","dateAdded":"2022-05-04","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2014-4113","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:01ef2dc5-7430-48c9-87e4-5848830323e3","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-4113","advisory_id":"01ef2dc5-7430-48c9-87e4-5848830323e3","event_types":["advisory"],"published_at":"2026-10-24T21:21:36.098794+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-05-04T00:00:00+00:00","detail_url":"/events/2599"},"members":[{"id":2599,"cve_ids":["CVE-2014-4113"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2014-4113","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2014-4113","aliases":["CVE-2014-4113"],"affected":[],"modified":"2022-05-04T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-264"],"cveID":"CVE-2014-4113","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-4113","dueDate":"2022-05-25","product":"Win32k","dateAdded":"2022-05-04","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2014-4113","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:01ef2dc5-7430-48c9-87e4-5848830323e3","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-4113","advisory_id":"01ef2dc5-7430-48c9-87e4-5848830323e3","event_types":["advisory"],"published_at":"2026-10-24T21:21:36.098794+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-05-04T00:00:00+00:00","detail_url":"/events/2599"}]}},{"id":2583,"cve_ids":["CVE-2018-8589"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2018-8589","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-8589","aliases":["CVE-2018-8589"],"affected":[],"modified":"2022-05-23T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2018-8589","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-8589","dueDate":"2022-06-13","product":"Win32k","dateAdded":"2022-05-23","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2018-8589","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7866934a-50b6-40d3-b368-42a57dd25573","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8589","advisory_id":"7866934a-50b6-40d3-b368-42a57dd25573","event_types":["advisory"],"published_at":"2026-10-24T21:21:31.528876+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-05-23T00:00:00+00:00","detail_url":"/advisories/advisory%3A7866934a-50b6-40d3-b368-42a57dd25573","group":{"id":"advisory:7866934a-50b6-40d3-b368-42a57dd25573","revision":1,"primary_event_id":2593,"change":"published","superseded_by":[],"changed":{"id":2593,"cve_ids":["CVE-2018-8589"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2018-8589","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-8589","aliases":["CVE-2018-8589"],"affected":[],"modified":"2022-05-23T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2018-8589","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-8589","dueDate":"2022-06-13","product":"Win32k","dateAdded":"2022-05-23","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2018-8589","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7866934a-50b6-40d3-b368-42a57dd25573","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8589","advisory_id":"7866934a-50b6-40d3-b368-42a57dd25573","event_types":["advisory"],"published_at":"2026-10-24T21:21:31.528876+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-05-23T00:00:00+00:00","detail_url":"/events/2593"},"members":[{"id":2593,"cve_ids":["CVE-2018-8589"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2018-8589","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-8589","aliases":["CVE-2018-8589"],"affected":[],"modified":"2022-05-23T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2018-8589","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-8589","dueDate":"2022-06-13","product":"Win32k","dateAdded":"2022-05-23","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2018-8589","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7866934a-50b6-40d3-b368-42a57dd25573","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8589","advisory_id":"7866934a-50b6-40d3-b368-42a57dd25573","event_types":["advisory"],"published_at":"2026-10-24T21:21:31.528876+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-05-23T00:00:00+00:00","detail_url":"/events/2593"}]}},{"id":2516,"cve_ids":["CVE-2015-2360"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Win32k.sys in the kernel-mode drivers in Microsoft Windows allows local users to gain privileges or cause denial-of-service (DoS). CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2015-2360","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-2360","aliases":["CVE-2015-2360"],"affected":[],"modified":"2022-05-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2015-2360","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-2360","dueDate":"2022-06-15","product":"Win32k","dateAdded":"2022-05-25","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Win32k.sys in the kernel-mode drivers in Microsoft Windows allows local users to gain privileges or cause denial-of-service (DoS).","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-2360","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:861a26d4-5229-417b-8297-f4244cc7cd6a","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-2360","advisory_id":"861a26d4-5229-417b-8297-f4244cc7cd6a","event_types":["advisory"],"published_at":"2026-10-24T21:20:03.189363+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-05-25T00:00:00+00:00","detail_url":"/advisories/advisory%3A861a26d4-5229-417b-8297-f4244cc7cd6a","group":{"id":"advisory:861a26d4-5229-417b-8297-f4244cc7cd6a","revision":1,"primary_event_id":2528,"change":"published","superseded_by":[],"changed":{"id":2528,"cve_ids":["CVE-2015-2360"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Win32k.sys in the kernel-mode drivers in Microsoft Windows allows local users to gain privileges or cause denial-of-service (DoS). CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2015-2360","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-2360","aliases":["CVE-2015-2360"],"affected":[],"modified":"2022-05-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2015-2360","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-2360","dueDate":"2022-06-15","product":"Win32k","dateAdded":"2022-05-25","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Win32k.sys in the kernel-mode drivers in Microsoft Windows allows local users to gain privileges or cause denial-of-service (DoS).","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-2360","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:861a26d4-5229-417b-8297-f4244cc7cd6a","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-2360","advisory_id":"861a26d4-5229-417b-8297-f4244cc7cd6a","event_types":["advisory"],"published_at":"2026-10-24T21:20:03.189363+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-05-25T00:00:00+00:00","detail_url":"/events/2528"},"members":[{"id":2528,"cve_ids":["CVE-2015-2360"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Win32k.sys in the kernel-mode drivers in Microsoft Windows allows local users to gain privileges or cause denial-of-service (DoS). CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2015-2360","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2015-2360","aliases":["CVE-2015-2360"],"affected":[],"modified":"2022-05-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2015-2360","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-2360","dueDate":"2022-06-15","product":"Win32k","dateAdded":"2022-05-25","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Win32k.sys in the kernel-mode drivers in Microsoft Windows allows local users to gain privileges or cause denial-of-service (DoS).","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2015-2360","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:861a26d4-5229-417b-8297-f4244cc7cd6a","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-2360","advisory_id":"861a26d4-5229-417b-8297-f4244cc7cd6a","event_types":["advisory"],"published_at":"2026-10-24T21:20:03.189363+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-05-25T00:00:00+00:00","detail_url":"/events/2528"}]}},{"id":1343,"cve_ids":["CVE-2023-29336"],"payload":{"kind":"advisory","title":"Microsoft Win32K Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation up to SYSTEM privileges. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2023-29336","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-29336","aliases":["CVE-2023-29336"],"affected":[],"modified":"2023-05-09T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2023-29336","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-29336; https://nvd.nist.gov/vuln/detail/CVE-2023-29336","dueDate":"2023-05-30","product":"Win32k","dateAdded":"2023-05-09","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation up to SYSTEM privileges.","vulnerabilityName":"Microsoft Win32K Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2023-29336","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f09f02c5-8cc5-4409-a2e8-5acf506ae351","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-29336","advisory_id":"f09f02c5-8cc5-4409-a2e8-5acf506ae351","event_types":["advisory"],"published_at":"2026-10-24T21:00:32.419383+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2023-05-09T00:00:00+00:00","detail_url":"/advisories/advisory%3Af09f02c5-8cc5-4409-a2e8-5acf506ae351","group":{"id":"advisory:f09f02c5-8cc5-4409-a2e8-5acf506ae351","revision":1,"primary_event_id":1331,"change":"published","superseded_by":[],"changed":{"id":1331,"cve_ids":["CVE-2023-29336"],"payload":{"kind":"advisory","title":"Microsoft Win32K Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation up to SYSTEM privileges. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2023-29336","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-29336","aliases":["CVE-2023-29336"],"affected":[],"modified":"2023-05-09T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2023-29336","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-29336; https://nvd.nist.gov/vuln/detail/CVE-2023-29336","dueDate":"2023-05-30","product":"Win32k","dateAdded":"2023-05-09","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation up to SYSTEM privileges.","vulnerabilityName":"Microsoft Win32K Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2023-29336","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f09f02c5-8cc5-4409-a2e8-5acf506ae351","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-29336","advisory_id":"f09f02c5-8cc5-4409-a2e8-5acf506ae351","event_types":["advisory"],"published_at":"2026-10-24T21:00:32.419383+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2023-05-09T00:00:00+00:00","detail_url":"/events/1331"},"members":[{"id":1331,"cve_ids":["CVE-2023-29336"],"payload":{"kind":"advisory","title":"Microsoft Win32K Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation up to SYSTEM privileges. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2023-29336","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-29336","aliases":["CVE-2023-29336"],"affected":[],"modified":"2023-05-09T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-416"],"cveID":"CVE-2023-29336","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-29336; https://nvd.nist.gov/vuln/detail/CVE-2023-29336","dueDate":"2023-05-30","product":"Win32k","dateAdded":"2023-05-09","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation up to SYSTEM privileges.","vulnerabilityName":"Microsoft Win32K Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2023-29336","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f09f02c5-8cc5-4409-a2e8-5acf506ae351","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-29336","advisory_id":"f09f02c5-8cc5-4409-a2e8-5acf506ae351","event_types":["advisory"],"published_at":"2026-10-24T21:00:32.419383+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2023-05-09T00:00:00+00:00","detail_url":"/events/1331"}]}},{"id":1321,"cve_ids":["CVE-2016-0165"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2016-0165","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-0165","aliases":["CVE-2016-0165"],"affected":[],"modified":"2023-06-22T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-264"],"cveID":"CVE-2016-0165","notes":"https://learn.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-039; https://nvd.nist.gov/vuln/detail/CVE-2016-0165","dueDate":"2023-07-13","product":"Win32k","dateAdded":"2023-06-22","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2016-0165","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b4f2ecac-ea98-493a-bf57-194f7d464116","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0165","advisory_id":"b4f2ecac-ea98-493a-bf57-194f7d464116","event_types":["advisory"],"published_at":"2026-10-24T20:59:27.45324+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2023-06-22T00:00:00+00:00","detail_url":"/advisories/advisory%3Ab4f2ecac-ea98-493a-bf57-194f7d464116","group":{"id":"advisory:b4f2ecac-ea98-493a-bf57-194f7d464116","revision":1,"primary_event_id":1311,"change":"published","superseded_by":[],"changed":{"id":1311,"cve_ids":["CVE-2016-0165"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2016-0165","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-0165","aliases":["CVE-2016-0165"],"affected":[],"modified":"2023-06-22T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-264"],"cveID":"CVE-2016-0165","notes":"https://learn.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-039; https://nvd.nist.gov/vuln/detail/CVE-2016-0165","dueDate":"2023-07-13","product":"Win32k","dateAdded":"2023-06-22","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2016-0165","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b4f2ecac-ea98-493a-bf57-194f7d464116","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0165","advisory_id":"b4f2ecac-ea98-493a-bf57-194f7d464116","event_types":["advisory"],"published_at":"2026-10-24T20:59:27.45324+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2023-06-22T00:00:00+00:00","detail_url":"/events/1311"},"members":[{"id":1311,"cve_ids":["CVE-2016-0165"],"payload":{"kind":"advisory","title":"Microsoft Win32k Privilege Escalation Vulnerability","summary":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2016-0165","products":[{"name":{"value":"Win32k","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-0165","aliases":["CVE-2016-0165"],"affected":[],"modified":"2023-06-22T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-264"],"cveID":"CVE-2016-0165","notes":"https://learn.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-039; https://nvd.nist.gov/vuln/detail/CVE-2016-0165","dueDate":"2023-07-13","product":"Win32k","dateAdded":"2023-06-22","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2016-0165","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b4f2ecac-ea98-493a-bf57-194f7d464116","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-0165","advisory_id":"b4f2ecac-ea98-493a-bf57-194f7d464116","event_types":["advisory"],"published_at":"2026-10-24T20:59:27.45324+00:00","technologies":["core-kev","win32k"],"context_update":false,"extraction_method":"structured","source_published_at":"2023-06-22T00:00:00+00:00","detail_url":"/events/1311"}]}}],"next_after":3646,"next_before":1321}