Oval Definition:oval:org.cisecurity:def:695
Revision Date:2016-07-01Version:35
Title:Hypervisor Code Integrity Security Feature Bypass (CVE-2016-0181)
Description:Microsoft Windows 10 Gold and 1511 allows local users to bypass the Virtual Secure Mode Hypervisor Code Integrity (HVCI) protection mechanism and perform RWX markings of kernel-mode pages via a crafted application, aka "Hypervisor Code Integrity Security Feature Bypass."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2016-0181
MS16-066
Platform(s):Microsoft Windows 10
Product(s):
Definition Synopsis
  • Microsoft Windows 10
  • either OS
  • Microsoft Windows 10 Mainline x86 is installed
  • OR Microsoft Windows 10 Mainline x64 is installed
  • AND Microsoft Windows Hyper-V is installed
  • AND Check if the version of Hvax64.exe is less than 10.0.10240.16766
  • OR Microsoft Windows 10
  • either OS
  • Microsoft Windows 10 Version 1511 (x86) is installed
  • OR Microsoft Windows 10 Version 1511 (x64) is installed
  • AND Microsoft Windows Hyper-V is installed
  • AND Check if the version of Hvax64.exe is less than 10.0.10586.212
  • BACK