EXPOSURES › CVE-2010-4398
CVE-2010-4398
HIGH ⌖ ON CISA KEV · EXPLOITEDA local privilege escalation vulnerability in Windows allows attackers to bypass UAC and gain system access.
This stack-based buffer overflow in win32k.sys enables local users to escalate privileges and bypass UAC, directly impacting DIB systems that rely on Windows for secure operations. The vulnerability was actively exploited in the wild, indicating a failure to patch known CVEs promptly. DIB organizations must ensure all Windows systems are updated with the latest patches to prevent similar exploits.
Shame score — The vulnerability was actively exploited in the wild, showing a failure to patch known CVEs promptly and allowing attackers to bypass UAC.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows allows local users to gain privileges, and bypass the User Account Control (UAC) feature.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |