CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2017-03-17
Microsoft Windows Kernel-Mode Driver (Transaction Manager) Local Elevation of Privilege (CVE-2017-0101)
[Affected Scope] Legacy and active Windows operating systems including Windows Vista SP2, 7 SP1, 8.1, 10, and Windows Server 2008, 2012, 2016 utilizing the Kernel Transaction Manager (KTM)
[Impact] A local attacker can execute a specially crafted application to trigger kernel memory corruption (CWE-119), leading to complete system takeover with SYSTEM privileges
[Mitigation] Immediately apply the official Microsoft security patches (such as MS17-013) and restrict execution privileges for non-administrative local accounts