CVE-2017-0263 : The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012

The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."

Published 2017-05-12 14:29:05

Updated 2024-07-24 16:04:49

Source Microsoft Corporation

View at NVD, CVE.org

Vulnerability category: Gain privilege

CVE-2017-0263 is in the CISA Known Exploited Vulnerabilities Catalog

CISA vulnerability name:

Microsoft Win32k Privilege Escalation Vulnerability

CISA required action:

Apply updates per vendor instructions.

CISA description:

Microsoft Win32k contains a privilege escalation vulnerability due to the Windows kernel-mode driver failing to properly handle objects in memory.

Notes:

https://nvd.nist.gov/vuln/detail/CVE-2017-0263

Added on 2022-02-10 Action due date 2022-08-10

Exploit prediction scoring system (EPSS) score for CVE-2017-0263

EPSS FAQ

58.87%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 98 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2017-0263

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
7.8	HIGH	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	NIST	2024-07-24
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2017-0263

CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2017-0263

https://xiaodaozhi.com/exploit/117.html

From CVE-2017-0263 to Windows Menu Management Component - 小刀志
Exploit;Third Party Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0263

CVE-2017-0263 | Win32k Elevation of Privilege Vulnerability
Patch;Vendor Advisory
http://www.securityfocus.com/bid/98258

Microsoft Windows Kernel 'Win32k.sys' CVE-2017-0263 Local Privilege Escalation Vulnerability
Broken Link;Third Party Advisory;VDB Entry
http://www.securitytracker.com/id/1038449

Windows Kernel 'win32k.sys' Bugs Let Local Users Deny Service and Gain Elevated Privileges - SecurityTracker
Broken Link;Third Party Advisory;VDB Entry

CVEs referencing this url
https://www.exploit-db.com/exploits/44478/

Microsoft Windows Manager (7 x86) - Menu Management Component UAF Privilege Elevation
Exploit;Third Party Advisory;VDB Entry

Products affected by CVE-2017-0263