CVE-2011-3402 Microsoft Windows
Microsoft Windows Kernel contains an unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers that allows remote attackers to execute arbitrary code via crafted font data in a Word document or web page.
- CVSS
- not scored
On CISA’s exploited list
Microsoft Windows Remote Code Execution Vulnerability
- Added
- 2025-10-06
- Federal patch deadline
- 2025-10-27
- Ransomware use
- not known