Dashboard / CVE-2010-4398

CVE-2010-4398

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 0/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows allows local users to gain privileges, and bypass the User Account Control (UAC) feature.

CISA Known Exploited Vulnerability

Vendor / Product Microsoft — Windows
Date Added 2022-03-28
Remediation Due 2022-04-21
https://nvd.nist.gov/vuln/detail/CVE-2010-4398

Weakness Classification (1)

Affected Software (9)

VendorProductVersion
microsoft windows_7 -
microsoft windows_server_2003 -
microsoft windows_server_2008 -
microsoft windows_server_2008 -
microsoft windows_server_2008 r2
microsoft windows_vista -
microsoft windows_vista -
microsoft windows_xp -
microsoft windows_xp -

References & Advisories (14)

http://www.kb.cert.org/vuls/id/529673
Third Party Advisory US Government Resource
http://www.exploit-db.com/exploits/15609/
Exploit Third Party Advisory VDB Entry
http://secunia.com/advisories/42356
Broken Link Vendor Advisory
http://www.securityfocus.com/bid/45045
Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1025046
Broken Link Third Party Advisory VDB Entry

Bug Bounty Relevance

0 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

No EPSS data available

Intelligence Sources

kev ref →

External Links