CVEvulnerability

CVE-2017-0026

7.8 HIGH Published 2017-03-17 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2017-03-17
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.0 ([email protected]): 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected]): 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

The kernel-mode drivers in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0024, CVE-2017-0056, CVE-2017-0078, CVE-2017-0079, CVE-2017-0080, CVE-2017-0081, and CVE-2017-0082.

Affected configurations

• microsoft windows 10 • microsoft windows 10 1511 • microsoft windows 10 1607 • microsoft windows server 2016

References

http://www.securityfocus.com/bid/96032 Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038017 www.securitytracker.com
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0026 Patch, Vendor Advisory
http://www.securityfocus.com/bid/96032 Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038017 www.securitytracker.com
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0026 Patch, Vendor Advisory