Skip to content
skopnix
Dossier · Vulnerability

Actively exploited · CISA KEV · NVD published 2017-05-12

CVE-2017-0263

The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."

  1. First PoC
  2. 3127 days →First cited attacker

Signals

Exploited in the wild
Yesadded 2022-02-10 · due 2022-08-10. An observation, not a forecast.
EPSS · 30-day forecast
10%Chance of exploitation in the next 30 days, 96th percentile of all CVEs. A forecast; KEV outranks it.
CVSS · NVD · HIGH
7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Internet exposure
not stated by sourcesNo exposure census on this CVE's dispatches.

Exploits

1 known · links only

Exploit-DB1

  1. Microsoft Windows Manager (7 x86) - Menu Management Component UAF Privilege Elevation ↗

    created 2018-03-26

On the wire

0 dispatches

No dispatch on our wire has named this CVE yet.

Watch this one?

KEV additions reach Telegram and the KEV-only RSS as they land.

Follow on TelegramKEV RSSAPI

Check your stack

Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.

Stack checkNo key. No signup.