CVE-2017-0165

Опубликовано: 12 апр. 2017

Источник: nvd

CVSS3: 7.8

CVSS2: 7.2

EPSS Средний

Описание

An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10, Windows 10 1511, Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2 fails to properly sanitize handles in memory, aka "Windows Elevation of Privilege Vulnerability."

Ссылки

http://www.securityfocus.com/bid/97467
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038239
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0165
Patch
Vendor Advisory
https://www.exploit-db.com/exploits/41901/
http://www.securityfocus.com/bid/97467
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038239
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0165
Patch
Vendor Advisory
https://www.exploit-db.com/exploits/41901/

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*

EPSS

Процентиль: 94%

0.12685

Средний

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2017-0165

CVSS3: 6.6

msrc

около 8 лет назад

Windows Elevation of Privilege Vulnerability

GHSA-9q7j-h8c8-7wrw