CVE-2017-8468: High severity windows 10 vulnerability

Published Jun 15, 2017

Updated

Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to run processes in an elevated context when the Windows kernel improperly handles objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This CVE ID is unique from CVE-2017-8465.

Affected Software

8 affected components

Microsoft Windows 10

Microsoft Windows 10=1511

Microsoft Windows 10=1607

Microsoft Windows 10=1703

Microsoft Windows 8.1

Microsoft Windows 8.1=rt

Microsoft Windows Server 2012=r2

Microsoft Windows Server 2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8468

Event History

Jun 15, 2017

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-8468?

CVE-2017-8468 has a severity rating of important, which indicates a significant risk to affected systems.

How do I fix CVE-2017-8468?

To mitigate CVE-2017-8468, users should apply the latest security updates provided by Microsoft for their installed Windows version.

What systems are affected by CVE-2017-8468?

CVE-2017-8468 affects Microsoft Windows 8.1, Windows RT 8.1, various versions of Windows 10, and Windows Server 2012 R2 and 2016.

What type of vulnerability is CVE-2017-8468?

CVE-2017-8468 is categorized as an elevation of privilege vulnerability in the Windows kernel.

Can CVE-2017-8468 allow remote attacks?

CVE-2017-8468 could potentially allow attackers to execute arbitrary code with elevated privileges, but it requires local access to exploit.