CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

CVE	Vendor	Product	Added	Due	Status
CVE-2016-0165 — Microsoft Win32k Privilege Escalation Vulnerability Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.	Microsoft	Win32k	Jun 22, 2023	Jul 13, 2023
CVE-2023-29336 — Microsoft Win32K Privilege Escalation Vulnerability Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation up to SYSTEM privileges.	Microsoft	Win32k	May 9, 2023	May 30, 2023
CVE-2015-2360 — Microsoft Win32k Privilege Escalation Vulnerability Win32k.sys in the kernel-mode drivers in Microsoft Windows allows local users to gain privileges or cause denial-of-service (DoS).	Microsoft	Win32k	May 25, 2022	Jun 15, 2022
CVE-2018-8589 — Microsoft Win32k Privilege Escalation Vulnerability A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system.	Microsoft	Win32k	May 23, 2022	Jun 13, 2022
CVE-2014-4113 — Microsoft Win32k Privilege Escalation Vulnerability Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.	Microsoft	Win32k	May 4, 2022	May 25, 2022
CVE-2021-40450 — Microsoft Win32k Privilege Escalation Vulnerability Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.	Microsoft	Win32k	Apr 25, 2022	May 16, 2022
CVE-2021-41357 — Microsoft Win32k Privilege Escalation Vulnerability Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.	Microsoft	Win32k	Apr 25, 2022	May 16, 2022
CVE-2013-3660 — Microsoft Win32k Privilege Escalation Vulnerability The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft does not properly initialize a pointer for the next object in a certain list, which allows local users to gain privileges.	Microsoft	Win32k	Mar 28, 2022	Apr 18, 2022
CVE-2015-2546 — Microsoft Win32k Memory Corruption Vulnerability The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application.	Microsoft	Win32k	Mar 15, 2022	Apr 5, 2022	Ransomware
CVE-2018-8120 — Microsoft Win32k Privilege Escalation Vulnerability A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.	Microsoft	Win32k	Mar 15, 2022	Apr 5, 2022	Ransomware

Microsoft

CVE-2016-0165 — Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.

Win32k · Jun 22, 2023

Microsoft

CVE-2023-29336 — Microsoft Win32K Privilege Escalation Vulnerability

Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation up to SYSTEM privileges.

Win32k · May 9, 2023

Microsoft

CVE-2015-2360 — Microsoft Win32k Privilege Escalation Vulnerability

Win32k.sys in the kernel-mode drivers in Microsoft Windows allows local users to gain privileges or cause denial-of-service (DoS).

Win32k · May 25, 2022

Microsoft

CVE-2018-8589 — Microsoft Win32k Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system.

Win32k · May 23, 2022

Microsoft

CVE-2014-4113 — Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.

Win32k · May 4, 2022

Microsoft

CVE-2021-40450 — Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.

Win32k · Apr 25, 2022

Microsoft

CVE-2021-41357 — Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.

Win32k · Apr 25, 2022

Microsoft

CVE-2013-3660 — Microsoft Win32k Privilege Escalation Vulnerability

The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft does not properly initialize a pointer for the next object in a certain list, which allows local users to gain privileges.

Win32k · Mar 28, 2022

Ransomware Microsoft

CVE-2015-2546 — Microsoft Win32k Memory Corruption Vulnerability

The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application.

Win32k · Mar 15, 2022

Ransomware Microsoft

CVE-2018-8120 — Microsoft Win32k Privilege Escalation Vulnerability

A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.

Win32k · Mar 15, 2022