Umbra Wiki cve cve/CVE-2010-4398
Back to wiki

CVE-2010-4398 — Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability

provenance: imported · CVE: CVE-2010-4398

CVE-2010-4398: Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability

CISA Known Exploited Vulnerability (KEV)

Vendor / project Microsoft
Product Windows
Date added 2022-03-28
Due date 2022-04-21
Ransomware campaign use Unknown

Description

Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows allows local users to gain privileges, and bypass the User Account Control (UAC) feature.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2010-4398

References

  • NVD: https://nvd.nist.gov/vuln/detail/CVE-2010-4398
  • KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog