Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly validate the token of a calling thread, which allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Windows Win32k 特权提升漏洞
Vulnerability Description
Microsoft Windows是美国微软(Microsoft)公司发布的一系列操作系统。win32k.sys是Windows子系统的内核部分,是一个内核模式设备驱动程序,它包含有窗口管理器、后台控制窗口和屏幕输出管理等。 Microsoft Windows内核模式驱动程序中存在特权提升漏洞,该漏洞源于内核模式驱动程序无法正确验证调用的线程令牌。攻击者可利用该漏洞获得管理员凭据,并使用该凭据提升特权,安装程序;查看、更改或删除数据;或者创建拥有完全管理权限的新帐户,运行旨在提升特权的经特殊设计的应用程序
CVSS Information
N/A
Vulnerability Type
N/A