A AegiFlow
UNKNOWNKNOWN EXPLOITED

CVE-2013-3660

Microsoft Win32k Privilege Escalation Vulnerability

Published
2022-03-28
Modified
2026-07-31
Sources
cisa-kev

Summary

The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft does not properly initialize a pointer for the next object in a certain list, which allows local users to gain privileges.

References

Includes data from the CISA Known Exploited Vulnerabilities catalog.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.