CVE-2017-0156 — Corporation Windows Graphics Component vulnerability

4 documents4 sources

Severity

7.0HIGHNVD

EPSS

1.1%

top 22.08%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Microsoft Corporation Windows Graphics Component Microsoft Windows 10 Microsoft Windows Server 2008 +1 more

Timeline

PublishedApr 12

Latest updateMay 13

Description

An elevation of privilege vulnerability exists in Windows 7, Windows 8.1, Windows RT 8.1, Windows 10, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016 when the Microsoft Graphics Component fails to properly handle objects in memory, aka "Windows Graphics Component Elevation of Privilege Vulnerability."

CVSS vector

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.0 | Impact: 5.9

Affected Packages3 packages

▶CVEListV5microsoft_corporation/windows_graphics_componentWindows 7, Windows 8.1, Windows RT 8.1, Windows 10, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016

▶NVDmicrosoft/windowsr2

▶NVDmicrosoft/windows_101511, 1607, 1703+2

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

GHSA

GHSA-492h-8wc2-6jvj: An elevation of privilege vulnerability exists in Windows 7, Windows 8↗2022-05-13

▶

CVEList

CVE-2017-0156: An elevation of privilege vulnerability exists in Windows 7, Windows 8↗2017-04-12

▶

📋Vendor Advisories

Microsoft

Win32k Elevation of Privilege Vulnerability↗2017-04-11

▶