CVE-2010-1895

CVE-2010-1895 is a privilege escalation vulnerability affecting the Windows kernel-mode drivers (win32k.sys) in Microsoft Windows XP SP2/SP3 and Windows Server 2003 SP2. It stems from improper memory allocation before copying user-mode data to kernel mode, allowing a local attacker to gain elevated privileges through a crafted application. With a CVSS score of 7.2, this vulnerability is considered high severity due to its local attack vector, low attack complexity, and complete impact on confidentiality, integrity, and availability. While no active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB) is reported, and there is minimal community discussion, its presence in older, potentially unpatched systems still poses a risk.