KLA10924 Privilege escalation and information disclosure vulnerabilities in Microsoft Windows

🗓️ 13 Dec 2016 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 83 Views

Privilege escalation and information disclosure vulnerabilities in Microsoft Windows. Improper handling of objects in memory in Microsoft Windows Crypto driver and Windows Common Log File System (CLFS) can be exploited locally by malicious users to obtain sensitive information or gain privileges

Reporter	Title	Published	Views	Family All 211
0day.today	Microsoft Windows - LoadUvsTable() Heap-based Buffer Overflow Vulnerability	16 Mar 201700:00	–	zdt
CNVD	Microsoft Windows Graphics Component Local Elevation of Privilege Vulnerability	14 Dec 201600:00	–	cnvd
CNVD	Microsoft Internet Explorer and Edge Information Disclosure Vulnerability (CNVD-2016-12412)	14 Dec 201600:00	–	cnvd
CNVD	Microsoft Internet Explorer and Edge Security Bypass Vulnerability	14 Dec 201600:00	–	cnvd
CNVD	Microsoft Internet Explorer and Edge Memory Corruption Vulnerability (CNVD-2016-12415)	14 Dec 201600:00	–	cnvd
CNVD	Microsoft Internet Explorer Information Disclosure Vulnerability (CNVD-2016-12417)	14 Dec 201600:00	–	cnvd
CNVD	Microsoft Windows Kernel Local Information Disclosure Vulnerability (CNVD-2016-12418)	14 Dec 201600:00	–	cnvd
CNVD	Microsoft Windows Local Information Disclosure Vulnerability	14 Dec 201600:00	–	cnvd
CNVD	Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2016-12421)	14 Dec 201600:00	–	cnvd
CNVD	Microsoft Windows Kernel 'Win32k.sys' local elevation of privilege vulnerability (CNVD-2016-12463)	14 Dec 201600:00	–	cnvd

Source	Link
technet	www.technet.microsoft.com/en-us/library/security/ms16-149.aspx
technet	www.technet.microsoft.com/en-us/library/security/ms16-153.aspx
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-7271
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-7273
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-7272
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-7257
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-7281
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-7279
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-7278
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-7283

22 Jan 2024 00:00Current

8High risk

Vulners AI Score8

CVSS 29.3

CVSS 38.8

EPSS0.38401