Product:
Windows
Summary
The kernel-mode drivers in Microsoft Windows allow local users to gain privileges via a crafted application, known as Win32k Elevation of Privilege Vulnerability. This vulnerability affects multiple versions of Windows, including Windows Server 2008, Windows 7, Windows 8.1, and Windows 10. Exploiting this vulnerability can lead to significant security risks for affected systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2017-0263 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the affected system and execute a specially crafted application. This application can manipulate the kernel-mode drivers to elevate privileges, allowing the attacker to perform unauthorized actions on the system. The low complexity of the attack makes it accessible to users with minimal technical skills.
Affected Products
- Windows Server 2008 SP2 and R2 SP1: Affected by kernel-mode driver vulnerabilities.
- Windows 7 SP1: Vulnerable to privilege escalation through crafted applications.
- Windows 8.1: Allows local users to gain elevated privileges.
- Windows Server 2012 Gold and R2: Susceptible to exploitation via crafted applications.
- Windows RT 8.1: Vulnerable to privilege escalation attacks.
- Windows 10 (Gold, 1511, 1607, 1703): Affected by the Win32k vulnerability.
- Windows Server 2016: Allows local users to gain privileges through exploitation.
Mitigation
To mitigate this vulnerability, users should apply updates as per the vendor’s instructions. Regularly updating systems and applying security patches can help protect against exploitation of this vulnerability.