CVE-2013-5065
Microsoft Windows Kernel Privilege Escalation Vulnerability
Published Nov 27, 2013 · updated Jun 16, 2026 · microsoft windows 2003 server
NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in November 2013.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Nov 27, 2013 · Catalog
Detected
NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in November 2013.
Mar 3, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Mar 24, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in November 2013.
Required action
Apply updates per vendor instructions.
CISA due date Mar 24, 2022
Affected
- cpe microsoft/windows 2003 serverversion unspecified
- cpe microsoft/windows xpversion unspecified
- vendor Microsoft Windowsversion unspecified
Sources
- CISA KEVConfirmed exploitationCVE-2013-5065
Microsoft Windows NDProxy.sys in the kernel contains an improper input validation vulnerability which can allow a local attacker to escalate privileges.
cisa.gov - CVE.orgVulnerability recordCVE-2013-5065
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2013-5065
30-day exploitation probability 34.7%
first.org - Exploit DatabasePublic exploit reference30014
Public archive entry. The exploit body is not stored here.
exploit-db.com - Exploit DatabasePublic exploit reference30392
Public archive entry. The exploit body is not stored here.
exploit-db.com - Exploit DatabasePublic exploit reference37732
Public archive entry. The exploit body is not stored here.
exploit-db.com - Metasploit ModulesPublic exploit moduleexploit_windows/local/ms_ndproxy
Public module reference (average). Module source is not copied into this catalog.
rapid7.com - NIST NVDVulnerability recordCVE-2013-5065
NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in November 2013.
nvd.nist.gov