Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability
Microsoft · Windows
Date added (CISA)
2025-03-03
Remediation due
2025-03-24
Known ransomware use
Yes
Remediation priority
P1 — known ransomware use · past CISA due date
Description
Microsoft Windows Win32k contains an improper resource shutdown or release vulnerability that allows for local, authenticated privilege escalation. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.