CVE-2017-0189 — Sensitive Information Exposure in Corporation Windows

CWE-200 — Sensitive Information Exposure12 documents6 sources
Severity
7.8HIGHNVD
NVD3.3
EPSS
0.4%
top 38.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
12
Microsoft Corporation WindowsMicrosoft Windows 10Microsoft Windows Server 2012+9 more
Timeline
PublishedApr 12
Latest updateMay 17

Description

An elevation of privilege vulnerability exists in Windows 10 when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode, aka "Win32k Elevation of Privilege Vulnerability." This CVE ID is unique from CVE-2017-0188.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages12 packages

▶NVDmicrosoft/windows_101511, 1607, 1703+2
▶CVEListV5microsoft_corporation/windowsWindows 10

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-g9w7-8hcr-36c9: A Win32k information disclosure vulnerability exists in Windows 8↗2022-05-17
▶
GHSA
GHSA-gm7p-c8p7-9785: An elevation of privilege vulnerability exists in Windows 10 when the Windows kernel-mode driver fails to properly handle objects in memory↗2022-05-13
▶

📋Vendor Advisories

1
Microsoft
Win32k Elevation of Privilege Vulnerability↗2017-04-11
▶

🕵️Threat Intelligence

5
Talos
Microsoft Patch Tuesday - April 2017↗2017-04-12
▶
Talos
Microsoft Patch Tuesday - April 2017↗2017-04-12
▶
Recorded Future
Microsoft Office Tops the Exploit Charts↗
▶
Recorded Future
Microsoft Office Tops the Exploit Charts | Recorded Future↗
▶
Zscaler
Zscaler protects against 16 new vulnerabilities for MS↗
▶
CVE-2017-0189 — Sensitive Information Exposure | cvebase