CVE-2017-0025
HighSummary
Kernel-mode drivers in Microsoft Windows allow local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability.'
Risk Assessment
Organizations may be exposed to unauthorized access to systems, potentially leading to serious security breaches and data loss.
Recommendation
It is recommended to update operating systems to the latest versions and implement appropriate security measures to minimize the risk of exploitation of this vulnerability.
Other vulnerabilities in Sterowniki w trybie jądra systemu Microsoft Windows
See all- CVE-2017-0056High
Kernel-mode drivers in Microsoft Windows allow local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability.'
- CVE-2016-3266High
Kernel-mode drivers in Microsoft Windows allow local users to gain elevated privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability'.
- CVE-2016-3311High
Kernel-mode drivers in Microsoft Windows allow local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability'.
- CVE-2016-3310High
Kernel-mode drivers in Microsoft Windows allow local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability'.
- CVE-2016-3308High
Kernel-mode drivers in Microsoft Windows allow local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability'.
- CVE-2016-0196High
Kernel-mode drivers in Microsoft Windows allow local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability'.
Original NVD description (English source)
The kernel-mode drivers in Microsoft Windows Vista; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0001, CVE-2017-0005, and CVE-2017-0047.