{"revision":"c723e17b6de242e2ab468966e902d823","evidence":{"cve":"CVE-2011-3402","kev":{"cve":"CVE-2011-3402","product":"Windows","name":"Microsoft Windows Remote Code Execution Vulnerability","dateAdded":"2025-10-06","dueDate":"2025-10-27","knownRansomwareUse":false,"shortDescription":"Microsoft Windows Kernel contains an unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers that allows remote attackers to execute arbitrary code via crafted font data in a Word document or web page.","vendor":"Microsoft","isMicrosoft":true,"products":[],"advisoryUrl":null,"publicExploit":null,"msrcUrl":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2011-3402","cisaUrl":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2011-3402"},"epss":null,"observedAt":"2026-10-23T16:01:26.7735792+00:00","kevRetained":false,"reviewIdentity":"487f0c1c3f460b25cc049388"}}