CVE-2017-0077
HighSummary
Kernel-mode drivers in Windows Server 2008 SP2, R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012, Windows RT 8.1, Windows 10, and Windows Server 2016 allow a local authenticated attacker to execute a specially crafted application to obtain information or, in Windows 7 and later, cause denial of service.
Risk Assessment
An attacker may gain access to sensitive information or cause system outages, potentially leading to significant disruptions in organizational operations.
Recommendation
It is recommended to update systems to the latest versions and apply relevant security patches to minimize the risk associated with this vulnerability.
Other vulnerabilities in Sterowniki w trybie jądra (kernel-mode drivers)
See all- CVE-2017-0081High
Kernel-mode drivers in Microsoft Windows 8.1, Windows Server 2012, Windows RT 8.1, Windows 10, and Windows Server 2016 allow local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability.'
- CVE-2017-0079High
Kernel-mode drivers in Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 allow local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability.'
- CVE-2017-0078High
Kernel-mode drivers in Microsoft Windows 8.1, Windows Server 2012, Windows RT 8.1, Windows 10, and Windows Server 2016 allow local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability.'
- CVE-2017-0024High
Kernel-mode drivers in Microsoft Windows 10 1607 and Windows Server 2016 allow local users to gain privileges via a crafted application, leading to an elevation of privilege vulnerability.
- CVE-2016-7211High
Kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application.
- CVE-2016-7185High
Kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka 'Win32k Elevation of Privilege Vulnerability.'
- CVE-2016-3376High
Kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability.'
- CVE-2016-3349High
Kernel-mode drivers in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application.
- CVE-2016-3250High
Kernel-mode drivers in Microsoft Windows Server 2012 and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application.
- CVE-2016-0048High
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application.
Original NVD description (English source)
The kernel-mode drivers in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow a local authenticated attacker to execute a specially crafted application to obtain information, or in Windows 7 and later, cause denial of service, aka "Win32k Information Disclosure Vulnerability."