Elevated Privilege Vulnerability in Microsoft Windows 10 and Server 2016
CVE-2017-0026

7.8HIGH

Key Information:

Vendor
Microsoft
Status
Win32k
Vendor
CVE Published:
17 March 2017

Summary

The kernel-mode drivers in certain versions of Microsoft Windows 10 and Windows Server 2016 contain a vulnerability that allows local users to escalate their privileges through specially crafted applications. This flaw, known as the Win32k elevation of privilege vulnerability, poses potential security risks by enabling attackers to gain higher-level access than intended. It is essential for users and administrators to apply security updates to mitigate these risks and protect their systems from exploit attempts.

Affected Version(s)

Win32k The kernel-mode drivers in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016

References

http://www.securityfocus.com/bid/96032
vdb-entryx_refsource_BID
https://portal.msrc.microsoft.com/en-US/security-guidance...
x_refsource_CONFIRM
http://www.securitytracker.com/id/1038017
vdb-entryx_refsource_SECTRACK

EPSS Score

6% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.