Product of Microsoft
Win32k
As of , 25 Microsoft Win32k vulnerabilities are on CISA's list of exploited vulnerabilities, 11 of them used in ransomware campaigns; 0 were added in 2026. Patch first: CVE-2014-4113.
Patch first
| # | Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|---|
| 1 | CVE-2014-4113Privilege Escalation | Microsoft Win32k | Patch this weekMetasploit module; EPSS 0.87; verified Exploit-DB entry | 0.87 | ||
| 2 | CVE-2018-8120Privilege Escalation | Microsoft Win32k | Patch this weekRansomware use; Metasploit module; EPSS 0.73; verified Exploit-DB entry | 0.73 | ||
| 3 | CVE-2015-1701Privilege Escalation | Microsoft Win32k | Patch this weekRansomware use; Metasploit module; EPSS 0.56; verified Exploit-DB entry | 0.56 | ||
| 4 | CVE-2018-8453Privilege Escalation | Microsoft Win32k | Patch this weekRansomware use; Metasploit module; EPSS 0.70; verified Exploit-DB entry | 0.70 | ||
| 5 | CVE-2013-3660Privilege Escalation | Microsoft Win32k | Patch this weekMetasploit module; verified Exploit-DB entry | 0.39 | ||
| 6 | CVE-2022-21882Privilege Escalation | Microsoft Win32k | Patch this weekRansomware use; Metasploit module; EPSS 0.59 | 0.59 | ||
| 7 | CVE-2019-1458Privilege Escalation | Microsoft Win32k | Patch this weekRansomware use; Metasploit module; EPSS 0.74 | 0.74 | ||
| 8 | CVE-2021-1732Privilege Escalation | Microsoft Win32k | Patch this weekRansomware use; Metasploit module; EPSS 0.78 | 0.78 | ||
| 9 | CVE-2019-0808Privilege Escalation | Microsoft Win32k | Patch this weekMetasploit module; EPSS 0.53 | 0.53 | ||
| 10 | CVE-2020-1054Privilege Escalation | Microsoft Win32k | Patch this weekMetasploit module; EPSS 0.54 | 0.54 | ||
| 11 | CVE-2016-7255Privilege Escalation | Microsoft Win32k | Patch this weekRansomware use; EPSS 0.81 | 0.81 | ||
| 12 | CVE-2019-0803Privilege Escalation | Microsoft Win32k | Patch this weekRansomware use | 0.45 | ||
| 13 | CVE-2015-2546Memory Corruption | Microsoft Win32k | Patch this weekRansomware use | 0.10 | ||
| 14 | CVE-2016-0167Privilege Escalation | Microsoft Win32k | Patch this weekRansomware use | 0.06 | ||
| 15 | CVE-2019-0859Privilege Escalation | Microsoft Win32k | Patch this weekRansomware use | 0.04 | ||
| 16 | CVE-2023-29336Privilege Escalation | Microsoft Win32k | Patch soon | 0.41 | ||
| 17 | CVE-2016-0165Privilege Escalation | Microsoft Win32k | Patch soon | 0.14 | ||
| 18 | CVE-2015-2360Privilege Escalation | Microsoft Win32k | Patch soon | 0.15 | ||
| 19 | CVE-2019-1132Privilege Escalation | Microsoft Win32k | Patch soon | 0.10 | ||
| 20 | CVE-2017-0263Privilege Escalation | Microsoft Win32k | Patch soon | 0.10 | ||
| 21 | CVE-2021-28310Privilege Escalation | Microsoft Win32k | Patch soon | 0.08 | ||
| 22 | CVE-2018-8589Privilege Escalation | Microsoft Win32k | Patch soon | 0.03 | ||
| 23 | CVE-2019-0797Privilege Escalation | Microsoft Win32k | Patch soon | 0.02 | ||
| 24 | CVE-2021-40450Privilege Escalation | Microsoft Win32k | Patch soon | 0.02 | ||
| 25 | CVE-2021-41357Privilege Escalation | Microsoft Win32k | Patch soon | 0.02 |
Added each year
Show the numbers
| Period | entries added |
|---|---|
| 2021 | 9 |
| 2022 | 14 |
| 2023 | 2 |
| 2024 | none |
| 2025 | none |
| 2026 | none |