CVE-2017-0263: high-severity vulnerability in Microsoft Windows
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA, has a public proof of concept and 1 threat group(s) use it.
Groups known to exploit this vulnerability (MITRE ATT&CK attribution).
Apply updates per vendor instructions.
A flaw in Windows kernel drivers allows a local user to run malicious code with higher privileges than their account should allow. An attacker with basic access to a computer could use this to take complete control.
This CWE-416 (use-after-free) vulnerability in kernel-mode drivers can be exploited by a local attacker through a crafted application to trigger memory corruption, leading to privilege escalation from user mode to kernel mode. Successful exploitation requires local access and execution capability but results in full system compromise.
In the same product, most dangerous first.