$ cve CVE-2013-3660 JSON

CVE-2013-3660 KEV EXPLOIT

7.8

HIGH · CVSS 3.1 · EPSS 39.3% (pctl 99)

Patch first

On CISA KEV — known exploited in the wild, due 2022-04-18.

Description

The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, and Windows Server 2012 does not properly initialize a pointer for the next object in a certain list, which allows local users to obtain write access to the PATHRECORD chain, and consequently gain privileges, by triggering excessive consumption of paged memory and then making many FlattenPath function calls, aka "Win32k Read AV Vulnerability."

Scoring

CVSS	7.8 (HIGH, v3.1)
Vector	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS	39.32% — more likely to be exploited than 99% of all CVEs
Weakness	CWE-119
On CISA KEV	yes — remediate by 2022-04-18
Public exploit	yes
Published	2013-05-24
Last modified	2026-06-16

CISA KEV

Name	Microsoft Win32k Privilege Escalation Vulnerability
Added	2022-03-28
Due	2022-04-18
Vendor / product	Microsoft / Win32k
Ransomware use	none reported

Affected (8)

Vendor	Product
microsoft	windows 7
microsoft	windows 8
microsoft	windows rt
microsoft	windows server 2003
microsoft	windows server 2008
microsoft	windows server 2012
microsoft	windows vista
microsoft	windows xp

Public exploits

Source	Title	Date
exploit-db	Microsoft Windows - 'EPATHOBJ::pprFlattenRec' Local Privilege Escalation (Metasploit)	2013-07-02
exploit-db	Microsoft Windows NT/2000/2003/2008/XP/Vista/7/8 - 'EPATHOBJ' Local Ring	2013-06-03
exploit-db	Microsoft Windows - Win32k!EPATHOBJ::pprFlattenRec Uninitialized Next Pointer Testcase	2013-05-21

References

→ the Explorer · watch your stack · NVD