CVE-2017-0077

Dxgkrnl.sys Elevation of Privilege Vulnerability

CVE-2017-0077 is fixed in 27 products on 1 platform, first by KB4019473, released May 9, 2017. It is not reported as exploited, but the vendor rates exploitation more likely. Patch Radar priority: Urgent.

Urgent
CVSS
4.7
Important
Exploitation
More likely
Vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0154
74th percentile

<p>An elevation of privilege vulnerability exists when the Windows improperly handles objects in memory. In a local attack scenario, an attacker could exploit this vulnerability by running a specially crafted application to take control over the affected system. An attacker who successfully exploited this vulnerability could run processes in an elevated context. On systems with Windows 8.1 or later installed, this vulnerability can lead to denial of service.</p> <p>The update addresses the vulnerability by correcting the way in which the Microsoft DirectX graphics kernel subsystem (dxgkrnl.sys) handles certain calls and escapes to preclude improper memory mapping and prevent unintended elevation from user-mode.</p>

Where it's fixed

ProductFixed inFixReleased
Microsoft
Windows 10 Version 1511 for 32-bit Systems 10586.916 KB4019473 May 9, 2017
Windows 10 Version 1511 for x64-based Systems 10586.916 KB4019473 May 9, 2017
Windows 10 Version 1607 for 32-bit Systems 14393.1198 KB4019472 May 9, 2017
Windows 10 Version 1607 for x64-based Systems 14393.1198 KB4019472 May 9, 2017
Windows 10 Version 1703 for 32-bit Systems KB4016871 May 9, 2017
Windows 10 Version 1703 for x64-based Systems KB4016871 May 9, 2017
Windows 10 for 32-bit Systems 10240.17394 KB4019474 May 9, 2017
Windows 10 for x64-based Systems 10240.17394 KB4019474 May 9, 2017
Windows 7 for 32-bit Systems Service Pack 1 KB4019263 May 9, 2017
Windows 7 for 32-bit Systems Service Pack 1 KB4019264 May 9, 2017
Windows 7 for x64-based Systems Service Pack 1 KB4019263 May 9, 2017
Windows 7 for x64-based Systems Service Pack 1 KB4019264 May 9, 2017
Windows 8.1 for 32-bit systems KB4019213 May 9, 2017
Windows 8.1 for 32-bit systems KB4019215 May 9, 2017
Windows 8.1 for x64-based systems KB4019213 May 9, 2017
Windows 8.1 for x64-based systems KB4019215 May 9, 2017
Windows RT 8.1 KB4019215 May 9, 2017
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 KB4019263 May 9, 2017
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 KB4019264 May 9, 2017
Windows Server 2008 R2 for x64-based Systems Service Pack 1 KB4019263 May 9, 2017
Windows Server 2008 R2 for x64-based Systems Service Pack 1 KB4019264 May 9, 2017
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) KB4019263 May 9, 2017
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) KB4019264 May 9, 2017
Windows Server 2008 for 32-bit Systems Service Pack 2 KB4019149 May 9, 2017
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) KB4019149 May 9, 2017
Windows Server 2008 for Itanium-Based Systems Service Pack 2 KB4019149 May 9, 2017
Windows Server 2008 for x64-based Systems Service Pack 2 KB4019149 May 9, 2017
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) KB4019149 May 9, 2017
Windows Server 2012 KB4019214 May 9, 2017
Windows Server 2012 KB4019216 May 9, 2017
Windows Server 2012 (Server Core installation) KB4019214 May 9, 2017
Windows Server 2012 (Server Core installation) KB4019216 May 9, 2017
Windows Server 2012 R2 KB4019213 May 9, 2017
Windows Server 2012 R2 KB4019215 May 9, 2017
Windows Server 2012 R2 (Server Core installation) KB4019213 May 9, 2017
Windows Server 2012 R2 (Server Core installation) KB4019215 May 9, 2017
Windows Server 2016 14393.1198 KB4019472 May 9, 2017
Windows Server 2016 (Server Core installation) 14393.1198 KB4019472 May 9, 2017