CVE-2017-8552: microsoft corporation microsoft windows Improper Preservation of Permissions

Vulnerability summary

CVE-2017-8552 is a high (CVSS 7.8) Improper Preservation of Permissions vulnerability in microsoft corporation microsoft windows. EPSS estimates a 1.00% chance of exploitation in the next 30 days, higher than 62.5% of scored vulnerabilities.

Timeline

1. 15-06-2017
   PublishedVulnerability first disclosed.
2. 05-08-2024
   Last modifiedVulnerability information updated.

Description

A kernel-mode driver in Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows 8 allows an elevation of privilege when it fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability". This CVE is unique from CVE-2017-0263.

• CWE-281Improper Preservation of PermissionsThe product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.