Windows Cursor in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows improper elevation of privilege, aka ...
Date: 2017-06
Affected: microsoft/windows_10, microsoft/windows_8.1, microsoft/windows_rt_8.1, microsoft/windows_server_2012
Attack vector: other
Category: vulnerability-disclosure
Severity: High
CVE: CVE-2017-8466
CWE: CWE-281
CVSS: 7.8 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)

Windows Cursor in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows improper elevation of privilege, aka "Windows Cursor Elevation of Privilege Vulnerability".


Mitigations:

Architectural layers (MAESTRO):