Description
Microsoft Win32k contains a privilege escalation vulnerability due to the component failing to properly handle objects in memory. Successful exploitation allows an attacker to run code in kernel mode.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Windows | Microsoft / Windows | 7 for 32-bit Systems Service Pack 1 | affected |
| Windows | Microsoft / Windows | 7 for x64-based Systems Service Pack 1 | affected |
| Windows Server | Microsoft / Windows Server | 2008 for 32-bit Systems Service Pack 2 | affected |
| Windows Server | Microsoft / Windows Server | 2008 for 32-bit Systems Service Pack 2 (Core installation) | affected |
| Windows Server | Microsoft / Windows Server | 2008 for Itanium-Based Systems Service Pack 2 | affected |
| Windows Server | Microsoft / Windows Server | 2008 for x64-based Systems Service Pack 2 | affected |
| Windows Server | Microsoft / Windows Server | 2008 for x64-based Systems Service Pack 2 (Core installation) | affected |
| Windows Server | Microsoft / Windows Server | 2008 R2 for Itanium-Based Systems Service Pack 1 | affected |
| Windows Server | Microsoft / Windows Server | 2008 R2 for x64-based Systems Service Pack 1 | affected |
| Windows Server | Microsoft / Windows Server | 2008 R2 for x64-based Systems Service Pack 1 (Core installation) | affected |