win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server…
Priority LOW 35CWE-476Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- Complete · Complete · Complete
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-476.
Summary
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
Why it matters now
EPSS 0.01468 73rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 45
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:microsoft:windows_2003_server:-:sp2:*:*:*:*:*:* | not specified by NVD | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:* | not specified by NVD | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:* | not specified by NVD | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:* | not specified by NVD | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:itanium:* | r2 | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:x64:* | r2 | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:* | r2 sp1 | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:* | r2 sp1 | Vulnerable | Microsoft |
- cpe:2.3:o:microsoft:windows_2003_server:-:sp2:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:itanium:* Versions r2 Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:x64:* Versions r2 Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:* Versions r2 sp1 Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:* Versions r2 sp1 Vulnerable ·Microsoft
Show 35 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:* | not specified by NVD | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:x64:* | not specified by NVD | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:* | not specified by NVD | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:x64:* | not specified by NVD | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:x64:* | not specified by NVD | Vulnerable | Microsoft |
| cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:* | not specified by NVD | Vulnerable | Microsoft |
| cpe:2.3:a:avaya:agent_access:*:*:*:*:*:*:*:* | all versions | Vulnerable | Avaya |
| cpe:2.3:a:avaya:aura_conferencing_standard_edition:6.0.0:*:*:*:*:*:*:* | 6.0.0 | Vulnerable | Avaya |
| cpe:2.3:a:avaya:basic_call_management_system_reporting_desktop:*:*:*:*:*:*:*:* | all versions | Vulnerable | Avaya |
| cpe:2.3:a:avaya:call_management_server_supervisor:*:*:*:*:*:*:*:* | all versions | Vulnerable | Avaya |
| cpe:2.3:a:avaya:callpilot:*:*:*:*:*:*:*:* | 4.0.x – 5.0.x | Vulnerable | Avaya |
| cpe:2.3:a:avaya:callvisor_asai_lan:*:*:*:*:*:*:*:* | all versions | Vulnerable | Avaya |
| cpe:2.3:a:avaya:communication_server_1000_telephony_manager:*:*:*:*:*:*:*:* | 3.0.0 – 4.0.0 | Vulnerable | Avaya |
| cpe:2.3:a:avaya:computer_telephony:*:*:*:*:*:*:*:* | all versions | Vulnerable | Avaya |
| cpe:2.3:a:avaya:contact_center_express:*:*:*:*:*:*:*:* | all versions | Vulnerable | Avaya |
| cpe:2.3:a:avaya:customer_interaction_express:*:*:*:*:*:*:*:* | all versions | Vulnerable | Avaya |
| cpe:2.3:a:avaya:enterprise_manager:*:*:*:*:*:*:*:* | all versions | Vulnerable | Avaya |
| cpe:2.3:a:avaya:integrated_management:*:*:*:*:*:*:*:* | all versions | Vulnerable | Avaya |
| cpe:2.3:a:avaya:interaction_center:*:*:*:*:*:*:*:* | all versions | Vulnerable | Avaya |
| cpe:2.3:a:avaya:ip_agent:*:*:*:*:*:*:*:* | all versions | Vulnerable | Avaya |
| cpe:2.3:a:avaya:ip_softphone:*:*:*:*:*:*:*:* | all versions | Vulnerable | Avaya |
| cpe:2.3:a:avaya:meeting_exchange:*:*:*:*:*:*:*:* | 5.0.0 – 5.2.0 | Vulnerable | Avaya |
| cpe:2.3:a:avaya:messaging_application_server:*:*:*:*:*:*:*:* | 4.0.x – 5.2.x | Vulnerable | Avaya |
| cpe:2.3:a:avaya:network_reporting:*:*:*:*:*:*:*:* | all versions | Vulnerable | Avaya |
| cpe:2.3:a:avaya:octelaccess_server:*:*:*:*:*:*:*:* | all versions | Vulnerable | Avaya |
| cpe:2.3:a:avaya:octeldesigner:*:*:*:*:*:*:*:* | all versions | Vulnerable | Avaya |
| cpe:2.3:a:avaya:operational_analyst:*:*:*:*:*:*:*:* | all versions | Vulnerable | Avaya |
| cpe:2.3:a:avaya:outbound_contact_management:*:*:*:*:*:*:*:* | all versions | Vulnerable | Avaya |
| cpe:2.3:a:avaya:speech_access:*:*:*:*:*:*:*:* | all versions | Vulnerable | Avaya |
| cpe:2.3:a:avaya:unified_communication_center:*:*:*:*:*:*:*:* | all versions | Vulnerable | Avaya |
| cpe:2.3:a:avaya:unified_messenger:*:*:*:*:*:*:*:* | all versions | Vulnerable | Avaya |
| cpe:2.3:a:avaya:visual_messenger:*:*:*:*:*:*:*:* | all versions | Vulnerable | Avaya |
| cpe:2.3:a:avaya:visual_vector_client:*:*:*:*:*:*:*:* | all versions | Vulnerable | Avaya |
| cpe:2.3:a:avaya:vpnmanager_console:*:*:*:*:*:*:*:* | all versions | Vulnerable | Avaya |
| cpe:2.3:a:avaya:web_messenger:*:*:*:*:*:*:*:* | all versions | Vulnerable | Avaya |
- cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:x64:* Versions not specified by NVD Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:x64:* Versions not specified by NVD Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:x64:* Versions not specified by NVD Vulnerable ·Microsoft
- cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
- cpe:2.3:a:avaya:agent_access:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Avaya
- cpe:2.3:a:avaya:aura_conferencing_standard_edition:6.0.0:*:*:*:*:*:*:* Versions 6.0.0 Vulnerable ·Avaya
- cpe:2.3:a:avaya:basic_call_management_system_reporting_desktop:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Avaya
- cpe:2.3:a:avaya:call_management_server_supervisor:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Avaya
- cpe:2.3:a:avaya:callpilot:*:*:*:*:*:*:*:* Versions 4.0.x – 5.0.x Vulnerable ·Avaya
- cpe:2.3:a:avaya:callvisor_asai_lan:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Avaya
- cpe:2.3:a:avaya:communication_server_1000_telephony_manager:*:*:*:*:*:*:*:* Versions 3.0.0 – 4.0.0 Vulnerable ·Avaya
- cpe:2.3:a:avaya:computer_telephony:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Avaya
- cpe:2.3:a:avaya:contact_center_express:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Avaya
- cpe:2.3:a:avaya:customer_interaction_express:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Avaya
- cpe:2.3:a:avaya:enterprise_manager:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Avaya
- cpe:2.3:a:avaya:integrated_management:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Avaya
- cpe:2.3:a:avaya:interaction_center:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Avaya
- cpe:2.3:a:avaya:ip_agent:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Avaya
- cpe:2.3:a:avaya:ip_softphone:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Avaya
- cpe:2.3:a:avaya:meeting_exchange:*:*:*:*:*:*:*:* Versions 5.0.0 – 5.2.0 Vulnerable ·Avaya
- cpe:2.3:a:avaya:messaging_application_server:*:*:*:*:*:*:*:* Versions 4.0.x – 5.2.x Vulnerable ·Avaya
- cpe:2.3:a:avaya:network_reporting:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Avaya
- cpe:2.3:a:avaya:octelaccess_server:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Avaya
- cpe:2.3:a:avaya:octeldesigner:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Avaya
- cpe:2.3:a:avaya:operational_analyst:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Avaya
- cpe:2.3:a:avaya:outbound_contact_management:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Avaya
- cpe:2.3:a:avaya:speech_access:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Avaya
- cpe:2.3:a:avaya:unified_communication_center:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Avaya
- cpe:2.3:a:avaya:unified_messenger:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Avaya
- cpe:2.3:a:avaya:visual_messenger:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Avaya
- cpe:2.3:a:avaya:visual_vector_client:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Avaya
- cpe:2.3:a:avaya:vpnmanager_console:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Avaya
- cpe:2.3:a:avaya:web_messenger:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Avaya
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2011-1229
- 2026-10-03 Alias added: GHSA-pxr2-xwwm-f7f3
References
Sources
- CVE-2011-1229 · CVE Program
- CVE-2011-1229 · NVD
- FIRST EPSS
- GHSA-pxr2-xwwm-f7f3 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences