CVE-2017-0263

Win32k Elevation of Privilege Vulnerability

CVE-2017-0263 is fixed in 27 products on 1 platform, first by KB4019473, released May 9, 2017. It is being exploited: CISA added it to the Known Exploited Vulnerabilities catalog on February 10, 2022. Patch Radar priority: Patch now.

Patch nowCISA KEV
CVSS
7.8
Important
Exploitation
Exploited
Reported by the vendor
CISA KEV
Feb 10, 2022
Federal due date Aug 10, 2022
EPSS
0.1003
95th percentile

<p>An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p> <p>The update addresses this vulnerability by correcting how the Windows kernel-mode driver handles objects in memory.</p>

Where it's fixed

ProductFixed inFixReleased
Microsoft
Windows 10 Version 1511 for 32-bit Systems 10586.916 KB4019473 May 9, 2017
Windows 10 Version 1511 for x64-based Systems 10586.916 KB4019473 May 9, 2017
Windows 10 Version 1607 for 32-bit Systems 14393.1198 KB4019472 May 9, 2017
Windows 10 Version 1607 for x64-based Systems 14393.1198 KB4019472 May 9, 2017
Windows 10 Version 1703 for 32-bit Systems KB4016871 May 9, 2017
Windows 10 Version 1703 for x64-based Systems KB4016871 May 9, 2017
Windows 10 for 32-bit Systems 10240.17394 KB4019474 May 9, 2017
Windows 10 for x64-based Systems 10240.17394 KB4019474 May 9, 2017
Windows 7 for 32-bit Systems Service Pack 1 KB4019263 May 9, 2017
Windows 7 for 32-bit Systems Service Pack 1 KB4019264 May 9, 2017
Windows 7 for x64-based Systems Service Pack 1 KB4019263 May 9, 2017
Windows 7 for x64-based Systems Service Pack 1 KB4019264 May 9, 2017
Windows 8.1 for 32-bit systems KB4019213 May 9, 2017
Windows 8.1 for 32-bit systems KB4019215 May 9, 2017
Windows 8.1 for x64-based systems KB4019213 May 9, 2017
Windows 8.1 for x64-based systems KB4019215 May 9, 2017
Windows RT 8.1 KB4019215 May 9, 2017
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 KB4019263 May 9, 2017
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 KB4019264 May 9, 2017
Windows Server 2008 R2 for x64-based Systems Service Pack 1 KB4019263 May 9, 2017
Windows Server 2008 R2 for x64-based Systems Service Pack 1 KB4019264 May 9, 2017
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) KB4019263 May 9, 2017
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) KB4019264 May 9, 2017
Windows Server 2008 for 32-bit Systems Service Pack 2 KB4019204 May 9, 2017
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) KB4019204 May 9, 2017
Windows Server 2008 for Itanium-Based Systems Service Pack 2 KB4019204 May 9, 2017
Windows Server 2008 for x64-based Systems Service Pack 2 KB4019204 May 9, 2017
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) KB4019204 May 9, 2017
Windows Server 2012 KB4019214 May 9, 2017
Windows Server 2012 KB4019216 May 9, 2017
Windows Server 2012 (Server Core installation) KB4019214 May 9, 2017
Windows Server 2012 (Server Core installation) KB4019216 May 9, 2017
Windows Server 2012 R2 KB4019213 May 9, 2017
Windows Server 2012 R2 KB4019215 May 9, 2017
Windows Server 2012 R2 (Server Core installation) KB4019213 May 9, 2017
Windows Server 2012 R2 (Server Core installation) KB4019215 May 9, 2017
Windows Server 2016 14393.1198 KB4019472 May 9, 2017
Windows Server 2016 (Server Core installation) 14393.1198 KB4019472 May 9, 2017