CVE-2017-0263: Microsoft Win32k Privilege Escalation Vulnerability

High severity · published May 12, 2017

CVE-2017-0263

Microsoft Win32k Privilege Escalation Vulnerability

In wildKEV

7.8

CVSS

10%

EPSS

Yes

On KEV

Description

The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack vector

Local

Complexity

Low

Privileges

Low

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)10.0% · higher than 96% of CVEs

Exploited in the wildYes

CISA KEVListed Feb 10, 2022

Federal remediation dueAug 10, 2022

Ransomware campaign useNot known

Affected products

Which versions

Windows · Microsoft

Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 · source: vendor

Windows 10 1507 · Microsoft