Actively exploited · Published Nov 27, 2013 · Assigned by microsoft
CVE-2013-5065
High 7.8 Exploited
In plain English
A high-severity security flaw in Windows from Microsoft. Attackers are actively exploiting it in the wild (listed by CISA on March 3, 2022). The chance it is exploited in the next 30 days is estimated at 34.7% (higher than 98% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit, public proof-of-concept code. Apply updates per vendor instructions.
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)34.7%top 1.6% of all CVEs
Exploited in the wildYesCISA KEV since Mar 3, 2022
Attack tooling2Metasploit, Public PoC
CISA guidance
Apply updates per vendor instructions.
Federal agencies must remediate by Mar 24, 2022.
Official description
NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in November 2013.
Affected products (as reported)
References
- http://www.fireeye.com/blog/technical/cyber-exploits/2013/11/ms-windows-local-privilege-escalation-zero-day-in-the-wild.html x_refsource_MISC
- 37732 exploit, x_refsource_EXPLOIT-DB
- MS14-002 vendor-advisory, x_refsource_MS
- http://technet.microsoft.com/security/advisory/2914486 x_refsource_CONFIRM
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-5065 government-resource