CVE-2017-0101: high-severity vulnerability in Microsoft Corporation Windows
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.
Apply updates per vendor instructions.
A flaw in Windows kernel drivers allows a local user to run malicious code with system-level privileges. An attacker needs to already have access to the computer and can exploit this to take complete control.
The vulnerability exists in the Transaction Manager kernel-mode drivers across multiple Windows versions, allowing local attackers to achieve privilege escalation through a crafted application. The attack requires local code execution capability and results in elevation to kernel-level privileges, enabling full system compromise.
In the same product, most dangerous first.