7.8 High Exploited

CVE-2017-0263 Microsoft Win32k Privilege Escalation Vulnerability

Active exploitation observed

· CISA KEV catalogue

Required action Apply updates per vendor instructions.

Ransomware campaigns Not observed so far

Weakness CWE-416

Description

The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."

Affected products and versions

Product	Affected versions	Fixed in
Microsoft Windows	Versions not published

References

portal.msrc.microsoft.com portal.msrc.microsoft.com
1038449 www.securitytracker.com
98258 www.securityfocus.com
xiaodaozhi.com xiaodaozhi.com
44478 www.exploit-db.com

Timeline

Published May 12, 2017
Added to the KEV catalogue February 10, 2022
Last modified October 21, 2025

The 63 CVEs of Microsoft Windows →

CVE-2017-11885 Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10… Not rated CVE-2017-11927 Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10… Not rated CVE-2017-0174 Windows NetBIOS in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2,… Not rated CVE-2017-8633 Windows Error Reporting (WER) in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012… Not rated

Track this CVE