CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2010-12-06
Microsoft Windows Kernel win32k.sys Stack-based Buffer Overflow Local Privilege Escalation (CVE-2010-4398)
[Affected Scope] Windows XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 Gold/SP2/R2, and Windows 7
[Impact] Local attackers can exploit this to bypass User Account Control (UAC) and execute arbitrary code with SYSTEM privileges
[Mitigation] Apply the official Microsoft security update (MS11-011) and restrict write access to registry keys associated with system fonts