Win32k Elevation of Privilege Vulnerability

🗓️ 13 Dec 2016 08:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 26 Views

Win32k Elevation of Privilege Vulnerability in Windows Kernel-mode Drive

Reporter	Title	Published	Views	Family All 24
CNVD	Microsoft Windows Kernel 'Win32k.sys' local elevation of privilege vulnerability (CNVD-2016-12463)	14 Dec 201600:00	–	cnvd
Check Point Advisories	Microsoft Windows Win32k Elevation of Privilege (MS16-151: CVE-2016-7260)	13 Dec 201600:00	–	checkpoint_advisories
CVE	CVE-2016-7260	20 Dec 201605:54	–	cve
Cvelist	CVE-2016-7260	20 Dec 201605:54	–	cvelist
EUVD	EUVD-2016-8116	7 Oct 202500:30	–	euvd
Microsoft KB	MS16-151: Description of the security update for Windows kernel-mode drivers: December 13, 2016	13 Dec 201608:00	–	mskb
Microsoft KB	December 13, 2016 — KB3205383 (OS Build 10240.17202)	13 Dec 201608:00	–	mskb
Microsoft KB	December 13, 2016 — KB3205386 (OS Build 10586.713)	13 Dec 201608:00	–	mskb
Microsoft KB	December 2016 Security Only Quality Update for Windows 7 SP1 and Windows Server 2008 R2 SP1	13 Dec 201608:00	–	mskb
Microsoft KB	December 2016 Security Only Quality Update for Windows 8.1 and Windows Server 2012 R2	13 Dec 201608:00	–	mskb

Vulners

Node

microsoft windows_server_2016_(server_core_installation)

OR

microsoft windows_server_2016

OR

microsoft windows_vista_x64_edition_service_pack_2

OR

microsoft windows_vista_service_pack_2

OR

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_(server_core_installation)

OR

microsoft windows_server_2012_(server_core_installation)

OR

microsoft windows_server_2012

OR

microsoft windows_server_2012

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_itanium-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_itanium-based_systems_service_pack_1

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_itanium-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2

OR

microsoft windows_rt_8.1

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_10_version_1607_for_x64-based_systems

OR

microsoft windows_10_version_1607_for_32-bit_systems

OR

microsoft windows_10_version_1511_for_x64-based_systems

OR

microsoft windows_10_version_1511_for_32-bit_systems

OR

microsoft windows_10_for_x64-based_systems

OR

microsoft windows_10_for_32-bit_systems

13 Dec 2016 08:00Current

3.5Low risk

Vulners AI Score3.5

CVSS 27.2

CVSS 37 - 7.8

EPSS0.00255

elevation of privilege windows kernel-mode driver memory objects arbitrary code exploit vulnerability update microsoft