MSDN Documentation

This critical vulnerability allows an attacker to execute arbitrary code on a vulnerable system with SYSTEM privileges. Exploitation typically requires network access and a specially crafted application.

A local attacker could exploit this vulnerability to gain SYSTEM privileges on a targeted system. The vulnerability resides within the Windows kernel's handling of specific system calls.

An unauthenticated attacker could send specially crafted packets to a vulnerable Windows machine, causing a denial of service condition, rendering the system unresponsive.

This vulnerability allows an attacker to read sensitive information from the system. It can be exploited by a low-privileged user or unauthenticated attacker depending on the configuration.

An attacker might be able to bypass security features implemented in Windows Defender by leveraging this vulnerability, potentially leading to further compromise.

A local attacker can gain elevated privileges on a compromised system. This vulnerability is part of the Win32k subsystem, commonly targeted in exploits.