Microsoft Win32k contains a privilege escalation vulnerability when the Windows kernel-mode driver fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode.
Product
Win32k
Added to KEV
3 Nov 2021
Federal remediation due
3 May 2022
Known ransomware use
Not reported
Page history
Changes are dated when recorded; day views use the last saved version from that UTC day, and citations stay fixed.
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.