Live › vulnerability › CVE-2010-4398
Go to dashboardA stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows lets a local user gain privileges and bypass User Account Control. CISA lists it as actively exploited in the wild.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Microsoft Windows | vendor | – | – |
Unknown from the sources.
Apply the Microsoft updates for the affected Windows version per vendor instructions; the specific patch is not named in the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges, and bypass the User Account Control (UAC) feature, via a crafted REG_BINARY value for a SystemDefaultEUDCFont registry key, aka "Driver Improper Interaction with Windows Kernel Vulnerability."
This page as .md · .json · in your agent: get_signal("CVE-2010-4398")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.