CVE-2017-0263KEV · OVERDUE

Microsoft Win32k Privilege Escalation Vulnerability

High · published May 12, 2017

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 95.6th percentile for exploit probability.

1534
days past CISA
deadline
CVSS v3.1
7.8
EPSS
10%
Percentile
95.6
In the wild
Confirmed
What it is

🚨 A crafty application can elevate its privileges, giving attackers full access to your Windows system! ⚡ Think of it like a hotel where a guest finds a way to access the staff-only areas by cleverly disguising as an employee — once inside, they can do just about anything! If exploited, an attacker could gain elevated privileges, allowing them to execute arbitrary code, modify system settings, or even install malware — all without the normal restrictions. This could lead to disastrous consequences like data breaches or total system compromise.

Put simply

Think of it like a hotel where a guest finds a way to access the staff-only areas by cleverly disguising as an employee — once inside, they can do just about anything! The Win32k Elevation of Privilege Vulnerability in Windows allows local users to bypass security restrictions through a specially crafted application, granting them elevated access to the system.

What to do

If exploited, an attacker could gain elevated privileges, allowing them to execute arbitrary code, modify system settings, or even install malware — all without the normal restrictions. This could lead to disastrous consequences like data breaches or total system compromise. Immediately patch your systems to the latest version available, ensuring that all affected Windows versions are updated. Regularly review and restrict user permissions to minimize risk exposure. You've got this! Stay vigilant and secure your systems with these updates! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.10034 · 95.6th percentile
Published
2017-05-12T14:00Z
KEV added
2022-02-10 · due 2022-08-10
EPSS history
Timeline
  • 10 FEB 00:00Z
    Added to CISA KEV — remediate by Aug 10
    kev
  • 12 MAY 14:00Z
    The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows…
    cvelistv5