CVE-2011-3402
CISA KEV
ACT NOW
Priority: 0.00
BB Relevance:
0/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
Microsoft Windows Kernel contains an unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers that allows remote attackers to execute arbitrary code via crafted font data in a Word document or web page.
CISA Known Exploited Vulnerability
Vendor / Product
Microsoft — Windows
Date Added
2025-10-06
Remediation Due
2025-10-27
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-087 ; https://nvd.nist.gov/vuln/detail/CVE-2011-3402
Affected Software (9)
| Vendor | Product | Version |
|---|---|---|
| microsoft | windows_7 | - |
| microsoft | windows_7 | - |
| microsoft | windows_server_2003 | - |
| microsoft | windows_server_2008 | - |
| microsoft | windows_server_2008 | - |
| microsoft | windows_server_2008 | - |
| microsoft | windows_vista | - |
| microsoft | windows_xp | - |
| microsoft | windows_xp | - |
References & Advisories (21)
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
US Government Resource
US Government Resource
US Government Resource
US Government Resource
US Government Resource
Third Party Advisory
Not Applicable
Not Applicable
Not Applicable
Broken Link
Broken Link
Broken Link
Broken Link
Broken Link