Class familyMicrosoft · Win32k
Microsoft Windows memory corruption flaws, 2008–2023
14 Win32k CVEs with CWE-119 weaknesses, 23 Oct 2008 to 14 Nov 2023. 14 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2008’08
1 2009’09
1 2010’10
2011’11
2012’12
1 2013’13
1 2014’14
3 2015’15
2016’16
2 2017’17
2018’18
1 2019’19
2020’20
2 2021’21
2022’22
1 2023’23
In CISA KEVNot in KEV
20081 CVE, 1 in KEV
20091 CVE, 1 in KEV
20101 CVE, 1 in KEV
20131 CVE, 1 in KEV
20141 CVE, 1 in KEV
20153 CVEs, 3 in KEV
20172 CVEs, 2 in KEV
20191 CVE, 1 in KEV
20212 CVEs, 2 in KEV
20231 CVE, 1 in KEV
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2008-4250KEV | 23 Oct 2008 | Microsoft Windows Buffer Overflow Vulnerability | Grouped by weakness | 69.8 |
| CVE-2008-0015KEV | 7 Jul 2009 | Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability | Grouped by weakness | 69.1 |
| CVE-2010-4398KEV | 6 Dec 2010 | Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability | Grouped by weakness | 71.4 |
| CVE-2013-3660KEV | 24 May 2013 | Microsoft Win32k Privilege Escalation Vulnerability | Grouped by weakness | 78.2 |
| CVE-2014-6332KEV | 11 Nov 2014 | Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability | Grouped by weakness | 89.1 |
| CVE-2015-2360KEV | 10 Jun 2015 | Microsoft Win32k Privilege Escalation Vulnerability | Grouped by weakness | 67.4 |
| CVE-2015-2426KEV | 20 Jul 2015 | Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability | Grouped by weakness | 69.1 |
| CVE-2015-2546KEV | 9 Sep 2015 | Microsoft Win32k Memory Corruption Vulnerability | Grouped by weakness | 81.7 |
| CVE-2017-0005KEV | 17 Mar 2017 | Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability | Grouped by weakness | 67.6 |
| CVE-2017-0101KEV | 17 Mar 2017 | Microsoft Windows Transaction Manager Privilege Escalation Vulnerability | Grouped by weakness | 78.3 |
| CVE-2019-1214KEV | 11 Sep 2019 | Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability | Grouped by weakness | 58.0 |
| CVE-2021-31979KEV | 14 Jul 2021 | Microsoft Windows Kernel Privilege Escalation Vulnerability | Grouped by weakness | 61.8 |
| CVE-2021-33771KEV | 14 Jul 2021 | Microsoft Windows Kernel Privilege Escalation Vulnerability | Grouped by weakness | 62.6 |
| CVE-2023-36033KEV | 14 Nov 2023 | Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | Grouped by weakness | 62.6 |