coldbraid

CVE-2013-3660 Microsoft Win32k

The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft does not properly initialize a pointer for the next object in a certain list, which allows local users to gain privileges.

CVSS
not scored

CWE-119

On CISA’s exploited list

Microsoft Win32k Privilege Escalation Vulnerability

Added
2022-03-28
Federal patch deadline
2022-04-18
Ransomware use
not known

Actors known to use it (MITRE ATT&CK)