Windows IME Elevation of Privilege Vulnerability

🗓️ 08 Nov 2016 08:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 32 Views

Windows IME Privilege Vulnerability Fix

Reporter	Title	Published	Views	Family All 26
BDU FSTEC	The vulnerability of the Windows operating system, which allows a hacker to increase their privileges	13 Jan 201700:00	–	bdu_fstec
CNVD	Microsoft Windows IME Elevation of Privilege Vulnerability	9 Nov 201600:00	–	cnvd
Check Point Advisories	Microsoft Windows IME Elevation of Privilege (MS16-130: CVE-2016-7221)	27 Dec 201600:00	–	checkpoint_advisories
CVE	CVE-2016-7221	10 Nov 201606:16	–	cve
Cvelist	CVE-2016-7221	10 Nov 201606:16	–	cvelist
EUVD	EUVD-2016-8080	7 Oct 202500:30	–	euvd
Japan Vulnerability Notes	JVN#21627267: Microsoft IME may insecurely load Dynamic Link Libraries	7 Jul 201700:00	–	jvn
Japan Vulnerability Notes	Microsoft IME may insecurely load Dynamic Link Libraries	7 Jul 201706:47	–	jvn
Microsoft KB	MS16-130 and MS16-135: Description of the security update for Windows: November 8, 2016	8 Nov 201608:00	–	mskb
Microsoft KB	November 2016 Security Only Quality Update for Windows 7 SP1 and Windows Server 2008 R2 SP1	8 Nov 201608:00	–	mskb

Vulners

Node

microsoft windows_server_2016

OR

microsoft windows_vista_x64_edition_service_pack_2

OR

microsoft windows_vista_service_pack_2

OR

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_(server_core_installation)

OR

microsoft windows_server_2012_(server_core_installation)

OR

microsoft windows_server_2012

OR

microsoft windows_server_2012

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_itanium-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_itanium-based_systems_service_pack_1

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_itanium-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2

OR

microsoft windows_rt_8.1

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_10_version_1607_for_x64-based_systems

OR

microsoft windows_10_version_1607_for_32-bit_systems

OR

microsoft windows_10_version_1511_for_x64-based_systems

OR

microsoft windows_10_version_1511_for_32-bit_systems

OR

microsoft windows_10_for_x64-based_systems

OR

microsoft windows_10_for_32-bit_systems

13 Dec 2016 08:00Current

3.2Low risk

Vulners AI Score3.2

CVSS 27.2

CVSS 36.5 - 7.8

EPSS0.02181

windows elevation of privilege vulnerability microsoft security update dll loading