CVE-2017-0050: microsoft corporation windows kernel
Vulnerability summary
CVE-2017-0050 is a high (CVSS 7.8) vulnerability in microsoft corporation windows kernel. EPSS estimates a 1.47% chance of exploitation in the next 30 days, higher than 73.3% of scored vulnerabilities.
Timeline
- 17-03-2017PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
The kernel API in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7; Windows 8; Windows 10 Gold, 1511, and 1607; Windows RT 8.1; Windows Server 2012 Gold and R2; and Windows Server 2016 does not properly enforce permissions, which allows local users to spoof processes, spoof inter-process communication, or cause a denial of service via a crafted application, aka "Windows Kernel Elevation of Privilege Vulnerability."
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.47%
Chance of exploitation in the next 30 days
Percentile
73%
Versus all other CVEs
30-day change
0.00 pp
From 1.47% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Microsoft3 products
- windows_10na | 1511 | 1607
- windows_server_2008r2:sp1
- windows_server_2012na | r2
Microsoft corporation1 product
- windows kernelThe kernel API in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7; Windows 8; Windows 10 Gold, 1511, and 1607; Windows RT 8.1; Windows Server 2012 Gold and R2; and Windows Server 2016
2 vendors · 4 products
References
3 links
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0050X Refsource CONFIRMPatchVendor Advisory