CVE-2017-8465: High severity windows 10 vulnerability

Published Jun 15, 2017

Updated

Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to run processes in an elevated context when the Windows kernel improperly handles objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This CVE ID is unique from CVE-2017-8468.

Affected Software

7 affected components

Microsoft Windows 10=1511

Microsoft Windows 10=1607

Microsoft Windows 10=1703

Microsoft Windows 8.1

Microsoft Windows 8.1=rt

Microsoft Windows Server 2012=r2

Microsoft Windows Server 2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8465

Event History

Jun 15, 2017

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-8465?

CVE-2017-8465 is classified as a critical elevation of privilege vulnerability.

How do I fix CVE-2017-8465?

To mitigate CVE-2017-8465, apply the security updates released by Microsoft for affected Windows versions.

What operating systems are affected by CVE-2017-8465?

CVE-2017-8465 affects Windows 8.1, Windows RT 8.1, Windows 10 (1511, 1607, 1703), and Windows Server 2012 R2 and 2016.

What type of attack does CVE-2017-8465 facilitate?

CVE-2017-8465 allows an attacker to run processes in an elevated context on the affected systems.

Who is impacted by the CVE-2017-8465 vulnerability?

Users and organizations using the affected Microsoft Windows versions are at risk from CVE-2017-8465.