NVD

Id
82962  
Name
CVE-2017-0050  
Description
The kernel API in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7; Windows 8; Windows 10 Gold, 1511, and 1607; Windows RT 8.1; Windows Server 2012 Gold and R2; and Windows Server 2016 does not properly enforce permissions, which allows local users to spoof processes, spoof inter-process communication, or cause a denial of service via a crafted application, aka Windows Kernel Elevation of Privilege Vulnerability.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2017-03-16  
Modified Date
2017-07-11  
Seq
2017-0050  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
408529 82962 CVE-2017-5017 95792  View
408530 82962 CVE-2017-5017 https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html  View
408531 82962 CVE-2017-5017 https://crbug.com/676975  View
408532 82962 CVE-2017-5017 95792  View
408533 82962 CVE-2017-5017 https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html  View
408534 82962 CVE-2017-5017 https://crbug.com/676975  View
410594 82962 CVE-2017-0042 96098  View
410595 82962 CVE-2017-0042 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0042  View
410596 82962 CVE-2017-0042 96098  View
410597 82962 CVE-2017-0042 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0042  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
65644 JVNDB-2017-001983 複数の Microsoft Windows 製品のカーネル API におけるプロセスを偽装される脆弱性 複数の Microsoft Windows 製品のカーネル API は、パーミッションを適切に処理しないため、プロセスを偽装される、プロセス間通信を偽装される、または、サービス運用妨害 (DoS) 状態にされる脆弱性が存在します。 CVE-2017-0050 CVE-2017-0050 82962 7.2 7.8 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-001983.html 2017-03-14 2017-03-27 View