Vulnerability Name: | CVE-2017-8562 (CCN-127688) | ||||||||||||
Assigned: | 2017-07-11 | ||||||||||||
Published: | 2017-07-11 | ||||||||||||
Updated: | 2019-10-03 | ||||||||||||
Summary: | Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to Windows improperly handling calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of Privilege Vulnerability". | ||||||||||||
CVSS v3 Severity: | 7.0 High (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) 6.1 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
6.1 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
| ||||||||||||
CVSS v2 Severity: | 6.9 Medium (CVSS v2 Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C)
| ||||||||||||
Vulnerability Type: | CWE-281 | ||||||||||||
Vulnerability Consequences: | Gain Privileges | ||||||||||||
References: | Source: MITRE Type: CNA CVE-2017-8562 Source: BID Type: Third Party Advisory, VDB Entry 99397 Source: CCN Type: BID-99397 Microsoft Windows CVE-2017-8562 Local Privilege Escalation Vulnerability Source: XF Type: UNKNOWN ms-alpc-cve20178562-priv-esc(127688) Source: CCN Type: Microsoft Security TechCenter Security Update Guide - July 2017 Security Updates Source: CONFIRM Type: Patch, Vendor Advisory https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8562 | ||||||||||||
Vulnerable Configuration: | Configuration 1: Configuration CCN 1: Denotes that component is vulnerable | ||||||||||||
BACK |