CVE-2017-0024
HighSummary
Kernel-mode drivers in Microsoft Windows 10 1607 and Windows Server 2016 allow local users to gain privileges via a crafted application, leading to an elevation of privilege vulnerability.
Risk Assessment
This vulnerability could be exploited by local users to gain unauthorized access to system resources, posing a significant security risk to the organization.
Recommendation
It is recommended to update systems to the latest versions to patch this vulnerability and to monitor system access for potential exploitation attempts.
Other vulnerabilities in Sterowniki w trybie jądra (kernel-mode drivers)
See all- CVE-2017-0077High
Kernel-mode drivers in Windows Server 2008 SP2, R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012, Windows RT 8.1, Windows 10, and Windows Server 2016 allow a local authenticated attacker to execute a specially crafted application to obtain information or, in Windows 7 and later, cause denial of service.
- CVE-2017-0081High
Kernel-mode drivers in Microsoft Windows 8.1, Windows Server 2012, Windows RT 8.1, Windows 10, and Windows Server 2016 allow local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability.'
- CVE-2017-0079High
Kernel-mode drivers in Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 allow local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability.'
- CVE-2017-0078High
Kernel-mode drivers in Microsoft Windows 8.1, Windows Server 2012, Windows RT 8.1, Windows 10, and Windows Server 2016 allow local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability.'
- CVE-2016-7211High
Kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application.
- CVE-2016-7185High
Kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka 'Win32k Elevation of Privilege Vulnerability.'
- CVE-2016-3376High
Kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability.'
- CVE-2016-3349High
Kernel-mode drivers in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application.
- CVE-2016-3250High
Kernel-mode drivers in Microsoft Windows Server 2012 and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application.
- CVE-2016-0048High
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application.
Original NVD description (English source)
The kernel-mode drivers in Microsoft Windows 10 1607 and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0026, CVE-2017-0056, CVE-2017-0078, CVE-2017-0079, CVE-2017-0080, CVE-2017-0081, and CVE-2017-0082.