CVE-2017-0263

The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."

Published: May 12, 2017
Updated: Jul 25, 2024
CVE: CVE-2017-0263
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

Severity: High
Score: 7.2
AV:L/AC:L/Au:N/C:C/I:C/A:C

CWEs:

CWE-416

Affected Software
References

Software	From	Fixed in
microsoft / windows_server_2012	r2	r2.x
microsoft / windows_server_2008	r2-sp1	r2-sp1.x
microsoft / windows_server_2008	--sp2	--sp2.x
microsoft / windows_7	--sp1	--sp1.x

http://www.securityfocus.com/bid/98258
http://www.securitytracker.com/id/1038449
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0263
https://www.exploit-db.com/exploits/44478/
https://xiaodaozhi.com/exploit/117.html

Vulnerability Database

CVE-2017-0263

Deep Security Visibility Without the Complexity