CVE-2011-0089

CVE-2011-0089 is a local privilege escalation vulnerability affecting win32k.sys in various Microsoft Windows operating systems, including XP, Vista, Windows 7, and Server 2003/2008. The vulnerability stems from improper validation of user-mode input, allowing a local attacker to gain elevated privileges through a crafted application. With a CVSS score of 7.2 (high), it requires local access but has low attack complexity, leading to complete confidentiality, integrity, and availability compromise. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.