Yüksek CISA KEV
CVE-2011-3402: Microsoft Windows: aktif olarak istismar edilen açık
Açıklama (NVD)
Microsoft Windows Kernel contains an unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers that allows remote attackers to execute arbitrary code via crafted font data in a Word document or web page.
Özet bilgiler
- EPSS
- %78,14 (yüzdelik 100)
- Yama
- Yok / bilinmiyor
- KEV
- Eklenme: 2025-10-06 · Son tarih: 2025-10-27
Gerekli aksiyon: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.