Skip to content
OpenAdvisories

Description

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

Affected products

VendorProductAffectedFixed
Microsoft Windows 10 Version 1507 10.0.10240.0 – < 10.0.10240.20680 10.0.10240.20680
Microsoft Windows 10 Version 1607 10.0.14393.0 – < 10.0.14393.7070 10.0.14393.7070
Microsoft Windows 10 Version 1809 10.0.17763.0 – < 10.0.17763.5936, 10.0.0 – < 10.0.17763.5936 10.0.17763.5936
Microsoft Windows 10 Version 21H2 10.0.19044.0 – < 10.0.19044.4529 10.0.19044.4529
Microsoft Windows 10 Version 22H2 10.0.19045.0 – < 10.0.19045.4529 10.0.19045.4529
Microsoft Windows 11 version 21H2 10.0.22000.0 – < 10.0.22000.3019 10.0.22000.3019
Microsoft Windows 11 version 22H2 10.0.22621.0 – < 10.0.22621.3737 10.0.22621.3737
Microsoft Windows 11 version 23H2 10.0.22631.0 – < 10.0.22631.3737 10.0.22631.3737
Microsoft Windows Server 2008 R2 Service Pack 1 6.1.7601.0 – < 6.1.7601.27170 6.1.7601.27170
Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation) 6.1.7601.0 – < 6.1.7601.27170 6.1.7601.27170
Microsoft Windows Server 2008 Service Pack 2 6.0.6003.0 – < 6.0.6003.22720 6.0.6003.22720
Microsoft Windows Server 2008 Service Pack 2 (Server Core installation) 6.0.6003.0 – < 6.0.6003.22720 6.0.6003.22720
Microsoft Windows Server 2012 6.2.9200.0 – < 6.2.9200.24919 6.2.9200.24919
Microsoft Windows Server 2012 (Server Core installation) 6.2.9200.0 – < 6.2.9200.24919 6.2.9200.24919
Microsoft Windows Server 2012 R2 6.3.9600.0 – < 6.3.9600.22023 6.3.9600.22023
Microsoft Windows Server 2012 R2 (Server Core installation) 6.3.9600.0 – < 6.3.9600.22023 6.3.9600.22023
Microsoft Windows Server 2016 10.0.14393.0 – < 10.0.14393.7070 10.0.14393.7070
Microsoft Windows Server 2016 (Server Core installation) 10.0.14393.0 – < 10.0.14393.7070 10.0.14393.7070
Microsoft Windows Server 2019 10.0.17763.0 – < 10.0.17763.5936 10.0.17763.5936
Microsoft Windows Server 2019 (Server Core installation) 10.0.17763.0 – < 10.0.17763.5936 10.0.17763.5936
Microsoft Windows Server 2022 10.0.20348.0 – < 10.0.20348.2527 10.0.20348.2527
Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) 10.0.25398.0 – < 10.0.25398.950 10.0.25398.950

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 3

References