SB2016101121 - Windows Kernel Local Elevation of Privilege Vulnerability

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2016101121

SB2016101121 - Windows Kernel Local Elevation of Privilege Vulnerability

Published: October 11, 2016

Security Bulletin ID SB2016101121
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Data manipulation

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Privilege escalation (CVE-ID: CVE-2016-0075)

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/U:Clear


The vulnerability allows a local user to obtain elevated privileges and view potentially sensitive data on the target system.

The vulnerability exists due to insufficient access control by a Windows kernel API on an affected system when handling access to sensitive registry information. A local user can gain potentially sensitive information that may be used to conduct further attacks.

Successful exploitation of this vulnerability will result in disclosure of important data on the vulnerable system.


Remediation

Install update from vendor's website.

References