- Vendor / Project
- Microsoft
- Product
- Windows
- Date added
- Mar 28, 2022
- Due date
- Apr 21, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-119
Description
Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows allows local users to gain privileges, and bypass the User Account Control (UAC) feature.
Required action
Apply updates per vendor instructions.