CVE-2017-8466 — Improper Preservation of Permissions in Corporation Windows Cursor

CWE-281 — Improper Preservation of Permissions5 documents5 sources
Severity
7.8HIGHNVD
EPSS
0.7%
top 28.16%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
14
Microsoft Corporation Windows CursorMicrosoft Windows 10Microsoft Windows Server 2012+11 more
Timeline
PublishedJun 15
Latest updateMay 13

Description

Windows Cursor in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows improper elevation of privilege, aka "Windows Cursor Elevation of Privilege Vulnerability".

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages14 packages

▶CVEListV5microsoft_corporation/windows_cursorWindows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and Windows Server 2016

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-8q4v-39jw-37mv: Windows Cursor in Windows 8↗2022-05-13
▶

📋Vendor Advisories

1
Microsoft
Win32k Elevation of Privilege Vulnerability↗2017-06-13
▶

🕵️Threat Intelligence

2
Talos
Microsoft Patch Tuesday - June 2017↗2017-06-13
▶
Zscaler
Zscaler found Multiple Security Vulnerabilities | 06-13-2017↗
▶