high7.8Public exploit code
CVE-2017-0165
An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10, Windows 10 1511, Windows 8.1, Windows RT 8.1, and Windows Server 2…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Windows 10 (Build 10586) - 'IEETWCollector' Arbitrary Directory/File Deletion Privilege Escalation2017-04-20 · local · windows · Verified
Impact
An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10, Windows 10 1511, Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2 fails to properly sanitize handles in memory, aka "Windows Elevation of Privilege Vulnerability."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows 10 | All versions Version 1511 |
| Microsoft | Windows 8.1 | All versions |
| Microsoft | Windows Rt 8.1 | All versions |
| Microsoft | Windows Server 2012 | Version r2 |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/97467
- http://www.securitytracker.com/id/1038239
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0165
- https://www.exploit-db.com/exploits/41901/
- http://www.securityfocus.com/bid/97467
- http://www.securitytracker.com/id/1038239
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0165
- https://www.exploit-db.com/exploits/41901/