Firetruck

CVE-2023-29336

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation up to SYSTEM privileges.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Windows 10 Version 1507Microsoft / Windows 10 Version 1507>= 10.0.10240.0, < 10.0.10240.19926affected
Windows 10 Version 1607Microsoft / Windows 10 Version 1607>= 10.0.14393.0, < 10.0.14393.5921affected
Windows Server 2008 R2 Service Pack 1Microsoft / Windows Server 2008 R2 Service Pack 1>= 6.1.7601.0, < 6.1.7601.26519affected
Windows Server 2008 R2 Service Pack 1 (Server Core installation)Microsoft / Windows Server 2008 R2 Service Pack 1 (Server Core installation)>= 6.1.7601.0, < 6.1.7601.26519affected
Windows Server 2008 Service Pack 2Microsoft / Windows Server 2008 Service Pack 2>= 6.0.6003.0, < 6.0.6003.22070affected
Windows Server 2008 Service Pack 2Microsoft / Windows Server 2008 Service Pack 2>= 6.0.6003.0, < 6.0.6003.22070affected
Windows Server 2008 Service Pack 2 (Server Core installation)Microsoft / Windows Server 2008 Service Pack 2 (Server Core installation)>= 6.0.6003.0, < 6.0.6003.22070affected
Windows Server 2012Microsoft / Windows Server 2012>= 6.2.9200.0, < 6.2.9200.24266affected
Windows Server 2012 R2Microsoft / Windows Server 2012 R2>= 6.3.9600.0, < 6.3.9600.20969affected
Windows Server 2012 R2 (Server Core installation)Microsoft / Windows Server 2012 R2 (Server Core installation)>= 6.3.9600.0, < 6.3.9600.20969affected
Windows Server 2012 (Server Core installation)Microsoft / Windows Server 2012 (Server Core installation)>= 6.2.9200.0, < 6.2.9200.24266affected
Windows Server 2016Microsoft / Windows Server 2016>= 10.0.14393.0, < 10.0.14393.5921affected
Windows Server 2016 (Server Core installation)Microsoft / Windows Server 2016 (Server Core installation)>= 10.0.14393.0, < 10.0.14393.5921affected