Live › vulnerability › CVE-2023-29336
Go to dashboardMicrosoft Win32k contains a flaw that lets a local user escalate privileges to SYSTEM. Exploitation in the wild is confirmed by CISA's Known Exploited Vulnerabilities catalog.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Microsoft Win32k | vendor | – | – |
| microsoft windows 10 1507 | vendor | < 10.0.10240.19926 | 10.0.10240.19926 |
| microsoft windows 10 1607 | vendor | < 10.0.14393.5921 | 10.0.14393.5921 |
| microsoft windows server 2008 | vendor | – | – |
| microsoft windows server 2008 | vendor | = r2 | – |
| microsoft windows server 2012 | vendor | – | – |
| microsoft windows server 2012 | vendor | = r2 | – |
| microsoft windows server 2016 | vendor | – | – |
Unknown from the sources.
Apply the Microsoft security update for CVE-2023-29336 per vendor instructions (CISA required action); the specific patched build is unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation up to SYSTEM privileges.
CISA required action: Apply updates per vendor instructions.
This page as .md · .json · in your agent: get_signal("CVE-2023-29336")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.