CVE-2001-1560: Microsoft Windows 2000

Low severity, CVSS 2.1. EPSS: 3.1% chance of exploitation in the next 30 days.

Win32k.sys (aka Graphics Device Interface (GDI)) in Windows 2000 and XP allows local users to cause a denial of service (system crash) by calling the ShowWindow function after receiving a WM_NCCREATE message.

Affected products

• Microsoft Windows 2000: any version
• Microsoft Windows XP: any version

Published 2001-12-31. Last modified 2026-06-16.