CVE-2013-3167

CVE Database · CVE-2013-3167

CVE-2013-3167

· N/AModified

CVSS v3.1

N/A

EPSS

1.87%

Published

Jul 10, 2013

Modified

Apr 28, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Win32k Information Disclosure Vulnerability."

Weaknesses (CWE)

CWE-264

Affected Products (9)

microsoft · windows_7vulnerable

microsoft · windows_server_2003vulnerable

microsoft · windows_server_2008vulnerable

microsoft · windows_vistavulnerable

microsoft · windows_xpvulnerable

References (6)

http://www.us-cert.gov/ncas/alerts/TA13-190A

Third Party AdvisoryUS Government Resource

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-053

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17293

http://www.us-cert.gov/ncas/alerts/TA13-190A

Third Party AdvisoryUS Government Resource

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-053

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17293

KEV Catalog EPSS Scores Vendors All CVEs