Skip to content
COOEY

EXPOSURES › CVE-2017-0263

CVE-2017-0263

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2022-02-10 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2017-0263 ↗
⌖ EXPLOITED IN THE WILD SHAME 75/100 exploited-in-wildprivilege-escalationunpatched

Microsoft Win32k privilege escalation vulnerability allows attackers to escalate privileges via kernel-mode driver memory handling failures.

This vulnerability enables privilege escalation by exploiting improper memory handling in the Windows kernel-mode driver, allowing attackers to gain elevated access without remote code execution. DIB organizations must ensure all Windows systems are patched against this actively exploited vulnerability to prevent unauthorized access and maintain compliance with security requirements.

Shame score — Privilege escalation vulnerabilities in core Windows components are highly dangerous and were actively exploited in the wild, indicating severe negligence in patch management and security hardening.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

DESCRIPTION

Microsoft Win32k contains a privilege escalation vulnerability due to the Windows kernel-mode driver failing to properly handle objects in memory.

AFFECTED FEDRAMP PRODUCTS · 4
PRODUCTSTATUS
Azure Commercial Cloud
Microsoft
Authorized
Azure Government (includes Dynamics 365)
Microsoft
Authorized
Microsoft Office 365 GCC High
Microsoft
In Process
Office 365 Multi-Tenant & Supporting Services
Microsoft
Authorized