CVE-2017-0165

CVE-2017-0165 is an elevation of privilege vulnerability in Microsoft Windows 10, 8.1, RT 8.1, and Server 2012 R2, caused by improper sanitization of handles in memory. With a CVSS score of 7.8 (HIGH), it allows a local attacker with low privileges to achieve high impact on confidentiality, integrity, and availability without user interaction. While not listed in CISA's KEV catalog, a public exploit (EDB-41901) exists for Windows 10 (Build 10586) demonstrating arbitrary directory/file deletion leading to privilege escalation. Despite the available exploit, there is no evidence of active exploitation, and it has received minimal community discussion or media coverage.