CVE-2017-0101 The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1; Windows 10 G...
HighCVSS 7.8
EPSS 57.5%
CISA KEV
added 2022-03-15 · due 2022-04-05
Ransomware
Exploited in the wild
Public exploit
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Windows Elevation of Privilege Vulnerability."
CISA Known Exploited Vulnerability
- Date added
- 2022-03-15
- Due date (FCEB)
- 2022-04-05
- Ransomware use
- Known
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 7 | All versions | No fix listed |
| Microsoft windows server 2008 | All versions | No fix listed |
| Microsoft windows vista | All versions | No fix listed |
| Microsoft windows | = The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1; Win | No fix listed |
References
- 96625 broken-link third-party-advisory vdb-entry
- 1038013 broken-link third-party-advisory vdb-entry
- portal.msrc.microsoft.com patch vendor-advisory
- 44479 exploit third-party-advisory vdb-entry
- www.cisa.gov government-resource us-government-resource