CVE-2017-8574

Summary

Graphics in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka "Microsoft Graphics Component Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-8573 and CVE-2017-8556.

Impact & exploitability

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products we track (2)

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

Official patch: https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8574 ↗

Additional information

• NVD record
• https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8574Patch
• http://www.securityfocus.com/bid/99438Advisory
• http://www.securitytracker.com/id/1038856Advisory