CVE-2013-5065

A local privilege escalation flaw in Windows NDProxy.sys allowed attackers to escalate privileges without remote code execution.

This kernel vulnerability in Windows NDProxy.sys allowed local attackers to escalate privileges via improper input validation. DIB organizations must ensure all Windows systems are patched, as unpatched systems remain a high-risk attack vector even without remote code execution. The flaw was actively exploited in the wild, indicating that known vulnerabilities can still be weaponized if patching is delayed.

Shame score — A known kernel vulnerability remained unpatched long enough to be actively exploited in the wild, demonstrating negligence in patch management and leaving systems vulnerable to privilege escalation.