Microsoft Win32k known exploited vulnerabilities
We track 25 CVEs in Microsoft Win32k. All of them are on CISA's Known Exploited Vulnerabilities catalog, meaning CISA has evidence of exploitation in the wild (listed 2021–2023). CISA flags 11 of them as used in ransomware campaigns. The most recent is CVE-2016-0165, added to KEV on .
- CVEs tracked
- 25
- On CISA KEV
- 25
- Ransomware use
- 11
- Rated critical
- 0
Every Microsoft Win32k CVE we track
| CVE / Vulnerability | Severity | CVSS | EPSS | Added to KEV | Patch by |
|---|---|---|---|---|---|
| CVE-2016-0165 Microsoft Win32k Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 13.7% | ||
| CVE-2023-29336 Microsoft Win32K Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 41.2% | ||
| CVE-2015-2360 Microsoft Win32k Privilege Escalation Vulnerability | [ HIGH ] | 8.8 | 14.8% | ||
| CVE-2018-8589 Microsoft Win32k Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 3.0% | ||
| CVE-2014-4113 Microsoft Win32k Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 86.9% | ||
| CVE-2021-41357 Microsoft Win32k Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 1.6% | ||
| CVE-2021-40450 Microsoft Win32k Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 1.6% | ||
| CVE-2013-3660 Microsoft Win32k Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 39.3% | ||
| CVE-2019-1132 Microsoft Win32k Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 9.9% | ||
| CVE-2018-8120 Microsoft Win32k Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.0 | 73.3% | ||
| CVE-2015-2546 Microsoft Win32k Memory Corruption Vulnerabilityransomware use | [ HIGH ] | 8.2 | 10.1% | ||
| CVE-2015-1701 Microsoft Win32k Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 55.9% | ||
| CVE-2017-0263 Microsoft Win32k Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 10.0% | ||
| CVE-2022-21882 Microsoft Win32k Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.0 | 59.2% | ||
| CVE-2018-8453 Microsoft Win32k Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 70.0% | ||
| CVE-2019-1458 Microsoft Win32k Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 74.4% | ||
| CVE-2021-28310 Microsoft Win32k Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 8.4% | ||
| CVE-2021-1732 Microsoft Win32k Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 78.4% | ||
| CVE-2020-1054 Microsoft Win32k Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 53.9% | ||
| CVE-2019-0859 Microsoft Win32k Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 4.2% | ||
| CVE-2019-0808 Microsoft Win32k Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 53.0% | ||
| CVE-2019-0803 Microsoft Win32k Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 45.2% | ||
| CVE-2019-0797 Microsoft Win32k Privilege Escalation Vulnerability | [ HIGH ] | 7.8 | 1.9% | ||
| CVE-2016-7255 Microsoft Win32k Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 81.0% | ||
| CVE-2016-0167 Microsoft Win32k Privilege Escalation Vulnerabilityransomware use | [ HIGH ] | 7.8 | 5.7% |
Sorted by date added to KEV. Severity and CVSS as stated by NVD or the vendor; EPSS from FIRST.org. "Patch by" is CISA's BOD 22-01 deadline for US federal agencies, a useful priority signal for everyone else. Machine-readable: /api/v1/vendors/microsoft.json.
Other Microsoft products
Every row links to its CVE record with the CISA required action, catalog coverage and primary sources. We describe impact and remediation only; no exploit code. See the full KEV tracker or compare KEV catalogs.