CVE-2023-29336
Microsoft Win32K Privilege Escalation Vulnerability
Published May 9, 2023 · updated Jun 16, 2026 · microsoft windows 10 1507
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation up to SYSTEM privileges.
Timeline
Detection, updates, and resolution for this record.
May 9, 2023 · Catalog
Detected
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation up to SYSTEM privileges.
May 9, 2023 · CISA KEV
Known exploited
Apply updates per vendor instructions.
May 30, 2023 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation up to SYSTEM privileges.
Required action
Apply updates per vendor instructions.
CISA due date May 30, 2023
Affected
- cpe microsoft/windows 10 1507version unspecified
- cpe microsoft/windows 10 1607version unspecified
- cpe microsoft/windows server 2008version unspecified
- cpe microsoft/windows server 2008r2
- cpe microsoft/windows server 2012version unspecified
- cpe microsoft/windows server 2012r2
- cpe microsoft/windows server 2016version unspecified
- vendor Microsoft Win32kversion unspecified
Sources
- CISA KEVCVE-2023-29336
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation up to SYSTEM privileges.
cisa.gov - CVE.orgCVE-2023-29336
Official CVE identifier
cve.org - FIRST EPSSCVE-2023-29336
30-day exploitation probability 41.2%
first.org - Exploit Database52301
Public archive entry. The exploit body is not stored here.
exploit-db.com - NIST NVDCVE-2023-29336
Win32k Elevation of Privilege Vulnerability
nvd.nist.gov