Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w6j5-fvc8-44j6

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The process-initialization implementation in win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 does not properly constrain impersonation levels, which allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."

The process-initialization implementation in win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 does not properly constrain impersonation levels, which allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."

EPSS

Процентиль: 94%
0.14919
Средний

Связанные уязвимости

nvd
больше 10 лет назад

The process-initialization implementation in win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 does not properly constrain impersonation levels, which allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."

fstec
больше 10 лет назад

Уязвимость операционной системы Windows, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 94%
0.14919
Средний