Security services, software licences and managed support from one accountable partner.

← All vulnerabilities

Not yet scored Actively exploited

CVE-2023-29336

Microsoft Win32K Privilege Escalation Vulnerability

Description

Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation up to SYSTEM privileges.

Recommended action

Apply updates per vendor instructions.

CISA remediation due date for U.S. federal agencies: 30 May 2023.

Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.