vendor:
Windows
by:
Unknown
7.5
CVSS
HIGH
Windows Kernel Exploit
119
CWE
Product Name: Windows
Affected Version From: Windows
Affected Version To: Windows
Patch Exists: NO
Related CWE: CVE-XXXX-XXXX (Not available)
CPE: o:microsoft:windows
Platforms Tested: Windows
Unknown
Windows Kernel Exploit
This is a Windows Kernel exploit that allows an attacker to execute arbitrary code in kernel mode. It takes advantage of a vulnerability in the handling of a specific message (0x9F9F) by a window procedure. By sending a specially crafted message to a vulnerable window, an attacker can execute arbitrary code with the privileges of the kernel.
Mitigation:
Apply the latest security updates from Microsoft to protect against this vulnerability. Avoid running untrusted code or opening suspicious files or links.