Exploited Vulnerabilities DailyMicrosoft Win32k: known exploited vulnerabilities
Entries25
Ransomware-linked11
First added2021-11-03
Latest2023-06-22
EPSS compared
86.9%
80.9%
78.3%
74.4%
73.4%
70.0%
59.2%
55.9%
54.1%
53.0%
45.2%
41.1%
39.3%
14.8%
13.7%
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2016-0165 | Microsoft Win32k | 2023-06-22 | 13.7% | Unknown |
| CVE-2023-29336 | Microsoft Win32k | 2023-05-09 | 41.1% | Unknown |
| CVE-2015-2360 | Microsoft Win32k | 2022-05-25 | 14.8% | Unknown |
| CVE-2018-8589 | Microsoft Win32k | 2022-05-23 | 3.0% | Unknown |
| CVE-2014-4113 | Microsoft Win32k | 2022-05-04 | 86.9% | Unknown |
| CVE-2021-41357 | Microsoft Win32k | 2022-04-25 | 1.5% | Unknown |
| CVE-2021-40450 | Microsoft Win32k | 2022-04-25 | 1.5% | Unknown |
| CVE-2013-3660 | Microsoft Win32k | 2022-03-28 | 39.3% | Unknown |
| CVE-2019-1132 | Microsoft Win32k | 2022-03-15 | 9.8% | Unknown |
| CVE-2018-8120 | Microsoft Win32k | 2022-03-15 | 73.4% | Known |
| CVE-2015-2546 | Microsoft Win32k | 2022-03-15 | 10.1% | Known |
| CVE-2015-1701 | Microsoft Win32k | 2022-03-03 | 55.9% | Known |
| CVE-2017-0263 | Microsoft Win32k | 2022-02-10 | 10.0% | Unknown |
| CVE-2022-21882 | Microsoft Win32k | 2022-02-04 | 59.2% | Known |
| CVE-2018-8453 | Microsoft Win32k | 2022-01-21 | 70.0% | Known |
| CVE-2019-1458 | Microsoft Win32k | 2022-01-10 | 74.4% | Known |
| CVE-2021-28310 | Microsoft Win32k | 2021-11-03 | 8.3% | Unknown |
| CVE-2021-1732 | Microsoft Win32k | 2021-11-03 | 78.3% | Known |
| CVE-2020-1054 | Microsoft Win32k | 2021-11-03 | 54.1% | Unknown |
| CVE-2019-0859 | Microsoft Win32k | 2021-11-03 | 4.1% | Known |
| CVE-2019-0808 | Microsoft Win32k | 2021-11-03 | 53.0% | Unknown |
| CVE-2019-0803 | Microsoft Win32k | 2021-11-03 | 45.2% | Known |
| CVE-2019-0797 | Microsoft Win32k | 2021-11-03 | 1.8% | Unknown |
| CVE-2016-7255 | Microsoft Win32k | 2021-11-03 | 80.9% | Known |
| CVE-2016-0167 | Microsoft Win32k | 2021-11-03 | 5.6% | Known |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.