CVE-2013-5065

HIGH KEV

Microsoft Windows XP/Server 2003 - Privilege Escalation

Title source: llm

Description

NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in November 2013.

Exploits (4)

exploitdb WORKING POC VERIFIED
by Metasploit · rubylocalwindows
https://www.exploit-db.com/exploits/30392
exploitdb WORKING POC VERIFIED
by ryujin · pythonlocalwindows
https://www.exploit-db.com/exploits/30014
exploitdb WORKING POC
by Tomislav Paskalev · clocalwindows_x86
https://www.exploit-db.com/exploits/37732
nomisec STUB
by Friarfukd · poc
https://github.com/Friarfukd/RobbinHood

Scores

CVSS v3 7.8
EPSS 0.7358
EPSS Percentile 98.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CISA KEV 2022-03-03
VulnCheck KEV 2013-11-27
InTheWild.io 2018-10-12
ENISA EUVD EUVD-2013-4907
Status published
Products (2)
microsoft/windows_2003_server
microsoft/windows_xp (2 CPE variants)
Published Nov 28, 2013
KEV Added Mar 03, 2022
Tracked Since Feb 18, 2026