Vulnerability details

CVE-2013-5065

Actively exploited
Microsoft Windows
CVSS 3.1
7.8High

Official description

NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in November 2013.

CVSS scores

ScoreVersionSourceVector
7.8High 3.1 CISA ADP / Vulnrichment (CISA-ADP) CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

VendorProductVersionsSource
No product information recorded.

References and advisories

5
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published
2013-11-28
Last updated
2025-10-22
State
Published
Assigner (CNA)
microsoft

CISA KEV catalog

Date added
2022-03-03
Due date
2022-03-24
Used in ransomware
Unknown

Exploit prediction (EPSS)

34.65%
Probability of exploitation in 30 days
98.4%
Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable
No
Exploitation
Active
Technical impact
Total

Weaknesses (CWE)

  • —