Privilege escalation vulnerabilities in Windows kernel-mode drivers

Description

Multiple cases of improper handling of objects in memory have been found in the Windows kernel-mode (Win32k) driver. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited remotely via a specially designed application by an attacker who has already logged on to the system.

Original advisories

• MS17-018

• CVE-2017-0056
• CVE-2017-0024
• CVE-2017-0026
• CVE-2017-0078
• CVE-2017-0079
• CVE-2017-0080
• CVE-2017-0081
• CVE-2017-0082

Exploitation

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

• Microsoft-Windows-Vista-4
• Microsoft-Windows-Server-2012
• Microsoft-Windows-7
• Microsoft-Windows-Server-2008
• Windows-RT
• Microsoft-Windows-10

CVE list

• CVE-2017-0056
  high
• CVE-2017-0024
  high
• CVE-2017-0026
  high
• CVE-2017-0078
  high
• CVE-2017-0079
  high
• CVE-2017-0080
  high
• CVE-2017-0081
  high
• CVE-2017-0082
  high

KB list

• 4012217
• 4012215
• 4012216
• 4012606
• 4013198
• 4013429
• 4012212
• 4012214
• 4012213
• 4012497
• 4013083

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com