KEV 2026.09.231,721 entries+8 in 7d8 open federal deadlinesas of / search ? keys
Telemetry

Product / Microsoft

Microsoft Win32k in CISA KEV

Catalog
2026.09.23
Vendor
Microsoft
Updated
2023-06-22

Answer CISA's KEV catalog lists 25 vulnerabilities in Microsoft Win32k as of catalog 2026.09.23, 6.4% of Microsoft's 388 entries. First added 2021-11-03, latest 2023-06-22; 11 ransomware-linked.

KEV entries
25
Ransomware: known
1144%
First added
2021-11-03
Latest added
2023-06-22
Median days to due
21
Open deadlines
0federal

TAdditions by year

Microsoft Win32k KEV additions per yearColumn chart of KEV additions per calendar year. 2021: 9; 2022: 14; 2023: 2; 2024: 0; 2025: 0; 2026: 0.0510152021: 9 added920212022: 14 added1420222023: 2 added220232024: 0 added20242025: 0 added20252026: 0 added (year to date)2026
Microsoft Win32k KEV additions by year
YearAdded
20219
202214
20232
20240
20250
20260

WWeaknesses

CWEs in Microsoft Win32k KEV entries
CWEEntriesShare
CWE-264 Permissions and access controls (category)520%
CWE-787 Out-of-bounds write416%
CWE-119 Memory buffer bounds error312%
CWE-416 Use after free28%
CWE-40428%

EAll entries

Microsoft Win32k entries in CISA KEV
CVEVulnerabilityAddedDueRansomwareCWE
CVE-2016-0165Microsoft Win32k Privilege Escalation VulnerabilityUnknownCWE-264
CVE-2023-29336Microsoft Win32K Privilege Escalation VulnerabilityUnknownCWE-416
CVE-2015-2360Microsoft Win32k Privilege Escalation VulnerabilityUnknownCWE-119
CVE-2018-8589Microsoft Win32k Privilege Escalation VulnerabilityUnknownnone listed
CVE-2014-4113Microsoft Win32k Privilege Escalation VulnerabilityUnknownCWE-264
CVE-2021-41357Microsoft Win32k Privilege Escalation VulnerabilityUnknownnone listed
CVE-2021-40450Microsoft Win32k Privilege Escalation VulnerabilityUnknownnone listed
CVE-2013-3660Microsoft Win32k Privilege Escalation VulnerabilityUnknownCWE-119
CVE-2019-1132Microsoft Win32k Privilege Escalation VulnerabilityUnknownnone listed
CVE-2018-8120Microsoft Win32k Privilege Escalation VulnerabilityKnownCWE-404
CVE-2015-2546Microsoft Win32k Memory Corruption VulnerabilityKnownCWE-119
CVE-2015-1701Microsoft Win32k Privilege Escalation VulnerabilityKnownCWE-264
CVE-2017-0263Microsoft Win32k Privilege Escalation VulnerabilityUnknownCWE-416
CVE-2022-21882Microsoft Win32k Privilege Escalation VulnerabilityKnownCWE-787
CVE-2018-8453Microsoft Win32k Privilege Escalation VulnerabilityKnownCWE-404
CVE-2019-1458Microsoft Win32k Privilege Escalation VulnerabilityKnownnone listed
CVE-2021-28310Microsoft Win32k Privilege Escalation VulnerabilityUnknownCWE-787
CVE-2021-1732Microsoft Win32k Privilege Escalation VulnerabilityKnownCWE-787
CVE-2020-1054Microsoft Win32k Privilege Escalation VulnerabilityUnknownCWE-787
CVE-2019-0859Microsoft Win32k Privilege Escalation VulnerabilityKnownnone listed
CVE-2019-0808Microsoft Win32k Privilege Escalation VulnerabilityUnknownnone listed
CVE-2019-0803Microsoft Win32k Privilege Escalation VulnerabilityKnownnone listed
CVE-2019-0797Microsoft Win32k Privilege Escalation VulnerabilityUnknownnone listed
CVE-2016-7255Microsoft Win32k Privilege Escalation VulnerabilityKnownCWE-264
CVE-2016-0167Microsoft Win32k Privilege Escalation VulnerabilityKnownCWE-264

Cite this

CISA's KEV catalog lists 25 vulnerabilities in Microsoft Win32k. Source: Telemetry analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.09.23 (released 2026-09-23). https://glide-telemetry.pages.dev/products/microsoft-win32k/

Source: CISA KEV catalog v2026.09.23, released 2026-09-23. Windows end 2026-09-23.

Keyboard shortcuts

Keyboard shortcuts
/Focus search
?Show this panel
EscClose panel or clear search
g dGo to Dashboard
g kGo to KEV
g vGo to Vendors
g pGo to Products
g wGo to Weaknesses
g sGo to Stats
g rGo to Regulations
g bGo to Briefings
g aGo to API