Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Microsoft Win32k: Kernel Mode Code Execution Risk

published 5 years ago · actively exploited
Summary

This issue affects the Win32k component of Microsoft Windows. An attacker could potentially use this vulnerability to execute malicious code with elevated privileges, which could lead to unauthorized access to your system. To mitigate this risk, ensure your Windows system is up to date with the latest security patches.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
microsoft win32k All versions
Original advisory text
Microsoft Win32k Privilege Escalation Vulnerability
Microsoft Win32k contains a privilege escalation vulnerability when the Win32k component fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode.
Fix within
Internet-facing Within 14 days at most
Internal Within 14 days at most
Exploitation
Known exploited
Listed in the CISA KEV catalogue - exploitation confirmed in the wild.
Timeline
Published3 Nov 2021
Updated29 May 2026
First seen29 May 2026
Track software like this
Free during beta