CVE-2017-0026Corporation Win32k vulnerability

18 documents4 sources
Severity
7.8HIGHNVD
EPSS
1.7%
top 17.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedMar 17
Latest updateMay 13

Description

The kernel-mode drivers in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0024, CVE-2017-0056, CVE-2017-0078, CVE-2017-0079, CVE-2017-0080, CVE-2017-0081, and CVE-2017-0082.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Patches

🔴Vulnerability Details

8
GHSA
GHSA-vpvr-f8fp-98p2: The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 82022-05-13
GHSA
GHSA-wx7h-6pg8-x268: The kernel-mode drivers in Microsoft Windows 82022-05-13
GHSA
GHSA-fhp7-r3qh-jp26: The kernel-mode drivers in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allow local users to gain privileges via a crafted applic2022-05-13
GHSA
GHSA-f7fr-prxv-qgjh: The kernel-mode drivers in Windows 82022-05-13
GHSA
GHSA-v966-22xm-xmh2: The kernel-mode drivers in Microsoft Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of2022-05-13

📋Vendor Advisories

1
Microsoft
Win32k Elevation of Privilege Vulnerability2017-03-14

🕵️Threat Intelligence

1
Zscaler
Zscaler found Multiple Security Vulnerabilities | 03-14-2017