CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2017-05-12
Microsoft Windows Win32k Kernel-Mode Driver Use-After-Free Local Privilege Escalation (CVE-2017-0263)
[Affected Scope] Legacy and modern Windows operating systems including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016 utilizing the win32k.sys driver.
[Impact] A local attacker can execute a specially crafted application to gain elevated SYSTEM privileges, completely bypassing OS security boundaries.
[Mitigation] Apply the official Microsoft security patches immediately and restrict execution privileges for untrusted local users.