CVE-2017-8552 — Improper Preservation of Permissions in Microsoft Windows Server 2008

CWE-281 — Improper Preservation of Permissions4 documents3 sources
Severity
7.8HIGHNVD
EPSS
0.2%
top 53.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Windows Server 2008
Timeline
PublishedJun 15
Latest updateMay 13

Description

A kernel-mode driver in Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows 8 allows an elevation of privilege when it fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability". This CVE is unique from CVE-2017-0263.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages1 packages

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-4fm9-9m4x-vrqw: A kernel-mode driver in Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 a↗2022-05-13
▶

🕵️Threat Intelligence

2
Qualys
Microsoft Fixes 94 Security Issues in Massive June Update | Qualys↗2017-06-13
▶
Qualys
Microsoft Fixes 94 Security Issues in Massive June Update↗2017-06-13
▶
CVE-2017-8552 — Improper Preservation of Permissions | cvebase