Microsoft Windows 8.1 and Windows RT 8.1, Windows Server... · CVE-2017-8562 · GitHub Advisory Database · GitHub

Microsoft Windows 8.1 and Windows RT 8.1, Windows Server...

High severity Unreviewed Published May 13, 2022 to the GitHub Advisory Database • Updated Feb 2, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to Windows improperly handling calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of Privilege Vulnerability".

References

Published by the National Vulnerability Database

Jul 11, 2017

Published to the GitHub Advisory Database May 13, 2022

Last updated Feb 2, 2023

Severity

High

7.0

/ 10

CVSS base metrics

Attack vector

Local

Attack complexity

High

Privileges required

Low

User interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H