CVE-2017-0263: Microsoft Win32k Privilege Escalation Vulnerability
The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."
Other sources
Microsoft Win32k contains a privilege escalation vulnerability due to the Windows kernel-mode driver failing to properly handle objects in memory.
— CISA
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-0263?
CVE-2017-0263 has been rated as important, indicating that it could lead to local privilege escalation.
How do I fix CVE-2017-0263?
To mitigate CVE-2017-0263, users should apply the latest security updates released by Microsoft for affected operating systems.
Which Microsoft products are affected by CVE-2017-0263?
CVE-2017-0263 affects various Microsoft products including Windows 7 SP1, Windows 8.1, Windows 10 versions, and several Windows Server versions.
Can CVE-2017-0263 be exploited remotely?
CVE-2017-0263 requires local access to exploit, meaning it cannot be exploited remotely.
What types of attacks are associated with CVE-2017-0263?
CVE-2017-0263 can enable an attacker to execute arbitrary code with elevated privileges through a crafted application.