CVE-2016-0073High

Windows Kernel Local Elevation of Privilege Vulnerability

Published
October 11, 2016
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2016-0073 →

📋 Description

An elevation of privilege vulnerability exists when the Windows Kernel API improperly allows a user to access sensitive registry information. An attacker who successfully exploited the vulnerability could gain access to user account information that is not intended for the user. A locally authenticated attacker could exploit this vulnerability by running a specially crafted application. The security update addresses the vulnerability by helping to ensure that the Windows Kernel API correctly restricts access to user account information.

🎯 Affected products13

  • Windows 10 Version 1511 for 32-bit Systems
  • Windows 10 Version 1511 for x64-based Systems
  • Windows 10 Version 1607 for 32-bit Systems
  • Windows 10 Version 1607 for x64-based Systems
  • Windows 10 for 32-bit Systems
  • Windows 10 for x64-based Systems
  • Windows 8.1 for 32-bit systems
  • Windows 8.1 for x64-based systems
  • Windows RT 8.1
  • Windows Server 2012
  • Windows Server 2012 (Server Core installation)
  • Windows Server 2012 R2
  • Windows Server 2012 R2 (Server Core installation)

✅ Remediation

KB3192440 (Security Update) KB3192441 (Security Update) KB3194798 (Security Update) KB3185331 (Monthly Rollup) KB3192392 (Security Only) KB3185332 (Monthly Rollup) KB3192393 (Security Only)

🔗 References (8)