Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2012-0181 — Microsoft Windows Server 2008 vulnerability

CWE-2643 documents3 sources
Severity
7.2HIGHNVD
EPSS
3.6%
top 12.18%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Microsoft Windows Server 2008
Timeline
PublishedMay 9
Latest updateMay 4

Description

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly manage Keyboard Layout files, which allows local users to gain privileges via a crafted application, aka "Keyboard Layout File Vulnerability."

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages1 packages

🔴Vulnerability Details

1
GHSA
GHSA-372h-p23p-77v2: win32k↗2022-05-04
▶

💥Exploits & PoCs

1
Exploit-DB
Microsoft Windows XP - Keyboard Layouts Pool Corruption (PoC) (MS12-034)↗2012-05-18
▶