Unrated severityNVD Advisory· Published Dec 11, 2013· Updated Jun 16, 2026

CVE-2013-3902

Description

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 SP1 and Windows 7 SP1 on 64-bit platforms allows local users to gain privileges via a crafted application, aka "Win32k Use After Free Vulnerability."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Microsoft/Windows 73 versions
cpe:2.3:o:microsoft:windows_7:*:sp1:x64:*:*:*:*:*+ 2 more
- cpe:2.3:o:microsoft:windows_7:*:sp1:x64:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_7:*:sp1:x86:*:*:*:*:*
- (no CPE)
Microsoft/Windows Server 2008 SP2 and R2 SP1llm-fuzzy

Patches

Vulnerability mechanics

References

docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-101nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000