CISA Known Exploited Vulnerability

CVE-2013-5065

Microsoft · Windows

Microsoft Windows Kernel Privilege Escalation Vulnerability

Date added
BOD 22-01 due date
CWE CWE-20
Ransomware Unknown

CISA description

Microsoft Windows NDProxy.sys in the kernel contains an improper input validation vulnerability which can allow a local attacker to escalate privileges.

Required action

Apply updates per vendor instructions.