Microsoft Win32k Privilege Escalation Vulnerability
Microsoft · Win32k
Date added (CISA)
2021-11-03
Remediation due
2022-05-03
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Microsoft Win32k contains a privilege escalation vulnerability when the Win32k component fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode.