CVE-2011-1237: Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3,...

Security readout for executives and security teams

This is a Windows kernel privilege-escalation flaw. An attacker who can run a crafted local application on an affected machine could gain higher privileges. The issue is tied to old Windows releases listed by Microsoft and was addressed in MS11-034. Exposure is most likely on legacy Windows systems that match the CVE's listed service packs and have not received MS11-034. Also check products or appliances whose vendors issued dependent advisories. Treat as high priority for any remaining affected legacy Windows systems. It is not remote code execution by itself, but it can turn limited local access into higher control over the host. Mitigation focus: Apply Microsoft MS11-034 updates to affected Windows systems.; Check vendor advisories for products bundling affected Windows components.; Prioritize systems where local users or untrusted code can execute applications..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.