CVE-2017-0025

CVE Database · CVE-2017-0025

CVE-2017-0025

· N/AModified

CVSS v3.1

N/A

EPSS

1.84%

Published

Mar 16, 2017

Modified

May 12, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The kernel-mode drivers in Microsoft Windows Vista; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0001, CVE-2017-0005, and CVE-2017-0047.

Affected Products (12)

microsoft · windows_10vulnerable

microsoft · windows_7vulnerable

microsoft · windows_8.1vulnerable

microsoft · windows_rt_8.1vulnerable

microsoft · windows_server_2008vulnerable

microsoft · windows_server_2012vulnerable

References (6)

http://www.securityfocus.com/bid/96626

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1038002

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0025