A AegiFlow
UNKNOWNKNOWN EXPLOITED

CVE-2016-7255

Microsoft Win32k Privilege Escalation Vulnerability

Published
2021-11-03
Modified
2026-07-31
Sources
cisa-kev

Summary

Microsoft Win32k kernel-mode driver fails to properly handle objects in memory which allows for privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.

References

Includes data from the CISA Known Exploited Vulnerabilities catalog.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.