CVE-2011-1237

CVE-2011-1237 is a use-after-free vulnerability in the win32k.sys kernel-mode driver affecting multiple versions of Microsoft Windows, including XP, Vista, Server 2003, Server 2008, and Windows 7. This flaw allows a local attacker to gain elevated privileges by running a specially crafted application that exploits incorrect driver object management. With a CVSS score of 7.2, it is considered high severity, indicating a local attack vector with low complexity and high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code in common frameworks like Metasploit or ExploitDB, nor significant community discussion or media coverage.