Product:
Windows
Summary
The kernel-mode driver in various versions of Microsoft Windows allows local users to gain privileges via a crafted application. This vulnerability is known as the Win32k Elevation of Privilege Vulnerability. It affects multiple Windows operating systems including Vista, Server 2008, Windows 7, 8.1, and 10.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2016-0167 |
Exploitation
To exploit this vulnerability, an attacker must create a specially crafted application that can be executed on the affected system. Once the application is run by a local user, it can trigger the vulnerability, allowing the attacker to elevate their privileges and gain unauthorized access to system resources.
Affected Products
- Windows Vista SP2: Affected by the Win32k Elevation of Privilege Vulnerability.
- Windows Server 2008 SP2: Vulnerable to privilege escalation through crafted applications.
- Windows 7 SP1: Local users can exploit this vulnerability to gain elevated privileges.
- Windows 8.1: Susceptible to exploitation via specially crafted applications.
- Windows Server 2012 Gold and R2: Affected by the same privilege escalation issue.
- Windows RT 8.1: Vulnerable to local privilege escalation.
- Windows 10 Gold and 1511: Can be exploited by local users to gain higher privileges.
Mitigation
To mitigate this vulnerability, users should apply the updates provided by Microsoft as per their instructions. Keeping the system updated is crucial to protect against this and other vulnerabilities.