CVE-2017-0026
HighSummary
Kernel-mode drivers in Microsoft Windows 10 Gold, 1511, 1607, and Windows Server 2016 allow local users to gain privileges via a crafted application. This vulnerability is different from those described in CVE-2017-0024, CVE-2017-0056, CVE-2017-0078, CVE-2017-0079, CVE-2017-0080, CVE-2017-0081, and CVE-2017-0082.
Risk Assessment
This vulnerability could lead to unauthorized access to the system and elevated privileges for local users, posing a serious security threat to the organization.
Recommendation
It is recommended to update operating systems to the latest versions and to monitor and restrict access for local users to minimize the risk of exploitation of this vulnerability.
Other vulnerabilities in Sterowniki w trybie jądra systemu Windows
See all- CVE-2016-7260High
Kernel-mode drivers in Microsoft Windows allow local users to gain elevated privileges via a crafted application. This affects multiple versions of Windows, including Vista, 7, 8.1, 10, and Windows Server.
- CVE-2016-7215High
Kernel-mode drivers in Microsoft Windows allow local users to gain elevated privileges via a crafted application. This affects multiple versions of Windows, including Vista, 7, 8.1, 10, and Windows Server.
- CVE-2016-3348High
Kernel-mode drivers in Microsoft Windows allow local users to gain elevated privileges via a crafted application. This affects multiple versions of Windows, including Vista, 7, 8.1, and 10.
- CVE-2016-3286High
Kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application.
- CVE-2016-3254High
Kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application.
- CVE-2016-3252High
Kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application.
- CVE-2016-3249High
Kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application.
- CVE-2016-3221High
Kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application.
- CVE-2016-3218High
Kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application.
- CVE-2016-0174High
Kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application.
Original NVD description (English source)
The kernel-mode drivers in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0024, CVE-2017-0056, CVE-2017-0078, CVE-2017-0079, CVE-2017-0080, CVE-2017-0081, and CVE-2017-0082.