CVE-2017-8578: Critical severity Microsoft Windows 10 vulnerability

Published Jul 11, 2017

Updated

Win32k in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-8577, CVE-2017-8580, CVE-2017-8581, and CVE-2017-8467.

Affected Software

12 affected components

Microsoft Windows 10

Microsoft Windows 10=1511

Microsoft Windows 10=1607

Microsoft Windows 10=1703

Microsoft Windows 7=sp1

Microsoft Windows 8.1

Microsoft Windows RT 8.1

Microsoft Windows Server 2008=sp2

Microsoft Windows Server 2008=r2-sp1

Microsoft Windows Server 2012

Microsoft Windows Server 2012=r2

Microsoft Windows Server 2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8578

Event History

Jul 11, 2017

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-8578?

CVE-2017-8578 has a critical severity rating due to its potential for elevation of privilege.

How do I fix CVE-2017-8578?

To fix CVE-2017-8578, you should apply the latest security updates provided by Microsoft for your affected Windows version.

What are the affected Windows versions for CVE-2017-8578?

CVE-2017-8578 affects Windows Server 2008, Windows 7, Windows 8.1, Windows 10 (various versions), and Windows Server 2012 up to 2016.

What kind of vulnerability is CVE-2017-8578?

CVE-2017-8578 is an elevation of privilege vulnerability that occurs due to improper handling of objects in memory.

Can CVE-2017-8578 be exploited remotely?

CVE-2017-8578 cannot be exploited remotely; it requires local access to the affected system.