CVE Catalog
Actively exploited in the wild
Microsoft Win32K Privilege Escalation Vulnerability
Microsoft - Win32k · Listed in the CISA KEV since 2023-05-09. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2023-29336
HighCVSS 7.8KEVSummary
Win32k Elevation of Privilege Vulnerability.
Risk Assessment
An attacker could gain elevated privileges on the system, potentially leading to full system compromise or malware installation.
Recommendation
Apply security updates provided by Microsoft for the Win32k driver.
Other vulnerabilities in Microsoft Win32k
Original NVD description (English source)
Win32k Elevation of Privilege Vulnerability