Title

Multiple Privilege Escalation Vulnerabilities in Microsoft Windows Kernel (Cat I impact)

Discussion

Microsoft has released a security bulletin addressing multiple privilege escalation vulnerabilities in Microsoft Windows kernel. The Microsoft Windows Kernel provides system-level services such as device management and memory management, allocates processor time to processes, and manages error handling. To exploit these vulnerabilities, an attacker would obtain access to a vulnerable system and load a malicious DLL. If successfully exploited, these vulnerabilities would allow an attacker to bypass security restrictions and execute arbitrary code in kernel mode on the affected system.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-40045

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.