Microsoft Win32k Privilege Escalation Vulnerability
Microsoft · Win32k
Date added (CISA)
2022-03-03
Remediation due
2022-03-24
Known ransomware use
Yes
Remediation priority
P1 — known ransomware use · past CISA due date
Description
An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges.