CVE-2017-8580

CVE-2017-8580: vulnerability in Microsoft Windows Server 2008 SP2 and R2 SP1…

Published · Updated

Follow this CVE+ Monitor Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.0%
Win32k in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-8577, CVE-2017-8578, CVE-2017-8581, and CVE-2017-8467.
Affected products
Microsoft Corporation · Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016
Related CVEs — Microsoft Windows Server 2008 SP2 and R2 SP1…

In the same product, most dangerous first.

CVE-2017-8582—CVE-2017-8582EPSS 8.3%CVE-2017-8578—CVE-2017-8578EPSS 6.5%CVE-2017-8564—CVE-2017-8564EPSS 3.0%CVE-2017-8577—CVE-2017-8577EPSS 1.0%CVE-2017-8573—CVE-2017-8573EPSS 1.0%CVE-2017-8581—CVE-2017-8581EPSS 1.0%