Product:
Windows
Summary
The kernel-mode drivers in various versions of Microsoft Windows allow local users to gain privileges via a crafted application. This vulnerability is known as Win32k Elevation of Privilege Vulnerability. It affects multiple Windows operating systems including Vista, Server 2008, 7, 8.1, 10, and Server 2016.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2016-7255 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the affected system and execute a specially crafted application. This application can manipulate the kernel-mode drivers to elevate privileges, allowing the attacker to perform unauthorized actions on the system.
Affected Products
- Windows Vista SP2: Affected by the vulnerability allowing privilege escalation.
- Windows Server 2008 SP2: Vulnerable to local privilege escalation through crafted applications.
- Windows 7 SP1: Local users can exploit this vulnerability to gain elevated privileges.
- Windows 8.1: Susceptible to privilege escalation via crafted applications.
- Windows Server 2012: Vulnerable to local exploitation for privilege escalation.
- Windows 10: Affected versions include Gold, 1511, and 1607, allowing local users to gain elevated privileges.
- Windows Server 2016: Local users can exploit this vulnerability to escalate privileges.
Mitigation
To mitigate this vulnerability, users should apply the updates provided by Microsoft as per their instructions. Keeping systems updated is crucial to protect against such vulnerabilities.