Vulnerability Name: | CVE-2016-0143 (CCN-111829) | ||||||||||||
Assigned: | 2015-12-04 | ||||||||||||
Published: | 2016-04-12 | ||||||||||||
Updated: | 2018-10-12 | ||||||||||||
Summary: | The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0165 and CVE-2016-0167. | ||||||||||||
CVSS v3 Severity: | 7.8 High (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) 7.0 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C)
7.9 High (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C)
| ||||||||||||
CVSS v2 Severity: | 7.2 High (CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C)
| ||||||||||||
Vulnerability Type: | CWE-264 | ||||||||||||
Vulnerability Consequences: | Gain Privileges | ||||||||||||
References: | Source: MITRE Type: CNA CVE-2016-0143 Source: CCN Type: Microsoft Security Bulletin MS16-039 Security Update for Microsoft Graphics Component (3148522) Source: CCN Type: Microsoft Security Bulletin MS16-062 Security Update for Windows Kernel-Mode Drivers (3158222) Source: CCN Type: Microsoft Security Bulletin MS16-073 Security Update for Windows Kernel-Mode Drivers (3164028) Source: CCN Type: Microsoft Security Bulletin MS16-090 Security Update for Windows Kernel-Mode Drivers (3171481) Source: CCN Type: Microsoft Security Bulletin MS16-097 Security Update for Microsoft Graphics Component (3177393) Source: CCN Type: Microsoft Security Bulletin MS16-098 Security Update for Windows Kernel-Mode Drivers (3178466) Source: CCN Type: Microsoft Security Bulletin MS16-106 Security Update for Microsoft Graphics Component (3185848) Source: CCN Type: Microsoft Security Bulletin MS16-120 Security Update for Microsoft Graphics Component (3192884) Source: CCN Type: Microsoft Security Bulletin MS16-123 Security Update for Kernel-Mode Drivers (3192892) Source: CCN Type: Microsoft Security Bulletin MS16-124 Security Update for Windows Registry (3193227) Source: CCN Type: Microsoft Security Bulletin MS16-135 Security Update for Kernel-Mode Drivers (3199135) Source: CCN Type: Microsoft Security Bulletin MS16-139 Security Update for Windows Kernel (3199720) Source: CCN Type: Microsoft Security Bulletin MS16-151 Security Update for Windows Kernel-Mode Drivers (3205651) Source: CCN Type: Microsoft Security Bulletin MS16-155 Security Update for .NET Framework (3205640) Source: CCN Type: Microsoft Security Bulletin MS17-013 Security Update for Microsoft Graphics Component (4013075) Source: BID Type: UNKNOWN 85896 Source: CCN Type: BID-85896 Microsoft Windows Kernel 'Win32k.sys' CVE-2016-0143 Local Privilege Escalation Vulnerability Source: SECTRACK Type: UNKNOWN 1035529 Source: SECTRACK Type: Third Party Advisory, VDB Entry 1035532 Source: MS Type: UNKNOWN MS16-039 Source: XF Type: UNKNOWN ms-kmd-cve20160143-priv-esc(111829) Source: CCN Type: Packet Storm Security [04-19-2016] Windows Kernel DrawMenuBarTemp Wild Write Source: EXPLOIT-DB Type: EXPLOIT Offensive Security Exploit Database [04-20-2016] Source: EXPLOIT-DB Type: UNKNOWN 39712 | ||||||||||||
Vulnerable Configuration: | Configuration 1: Configuration CCN 1: Denotes that component is vulnerable | ||||||||||||
Oval Definitions | |||||||||||||
| |||||||||||||
BACK |