CVE-2016-7255

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."

CVSS v3 7.8 HIGH
CVSS v2.0 7.2 HIGH

7.8^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.2^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://blog.trendmicro.com/trendlabs-security-intelligence/one-bit-rule-system-analyzing-cve-2016-7255-exploit-wild/	Broken Link
http://packetstormsecurity.com/files/140468/Microsoft-Windows-Kernel-win32k.sys-NtSetWindowLongPtr-Privilege-Escalation.html	Exploit Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/94064	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1037251	Broken Link Third Party Advisory VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-135	Patch Vendor Advisory
https://github.com/mwrlabs/CVE-2016-7255	Third Party Advisory
https://securingtomorrow.mcafee.com/mcafee-labs/digging-windows-kernel-privilege-escalation-vulnerability-cve-2016-7255/	Broken Link
https://security.googleblog.com/2016/10/disclosing-vulnerabilities-to-protect.html	Third Party Advisory
https://www.exploit-db.com/exploits/40745/	Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/40823/	Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/41015/	Exploit Third Party Advisory VDB Entry
http://blog.trendmicro.com/trendlabs-security-intelligence/one-bit-rule-system-analyzing-cve-2016-7255-exploit-wild/	Broken Link
http://packetstormsecurity.com/files/140468/Microsoft-Windows-Kernel-win32k.sys-NtSetWindowLongPtr-Privilege-Escalation.html	Exploit Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/94064	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1037251	Broken Link Third Party Advisory VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-135	Patch Vendor Advisory
https://github.com/mwrlabs/CVE-2016-7255	Third Party Advisory
https://securingtomorrow.mcafee.com/mcafee-labs/digging-windows-kernel-privilege-escalation-vulnerability-cve-2016-7255/	Broken Link
https://security.googleblog.com/2016/10/disclosing-vulnerabilities-to-protect.html	Third Party Advisory
https://www.exploit-db.com/exploits/40745/	Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/40823/	Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/41015/	Exploit Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:microsoft:windows_10_1507:-:::::::*
	cpe:2.3:o:microsoft:windows_10_1511:-:::::::*
	cpe:2.3:o:microsoft:windows_10_1607:-:::::::*
	cpe:2.3:o:microsoft:windows_7:-:sp1::::::
	cpe:2.3:o:microsoft:windows_8.1:-:::::::*
	cpe:2.3:o:microsoft:windows_rt_8.1:-:::::::*
	cpe:2.3:o:microsoft:windows_server_2008:-:sp2::::::
	cpe:2.3:o:microsoft:windows_server_2008:r2:sp1::::::
	cpe:2.3:o:microsoft:windows_server_2012:-:::::::*
	cpe:2.3:o:microsoft:windows_server_2012:r2:::::::*
	cpe:2.3:o:microsoft:windows_server_2016:-:::::::*
	cpe:2.3:o:microsoft:windows_vista:-:sp2::::::

History

21 Nov 2024, 02:57

Type	Values Removed	Values Added
References	~~() http://blog.trendmicro.com/trendlabs-security-intelligence/one-bit-rule-system-analyzing-cve-2016-7255-exploit-wild/ - Broken Link~~	() http://blog.trendmicro.com/trendlabs-security-intelligence/one-bit-rule-system-analyzing-cve-2016-7255-exploit-wild/ - Broken Link
References	~~() http://packetstormsecurity.com/files/140468/Microsoft-Windows-Kernel-win32k.sys-NtSetWindowLongPtr-Privilege-Escalation.html - Exploit, Third Party Advisory, VDB Entry~~	() http://packetstormsecurity.com/files/140468/Microsoft-Windows-Kernel-win32k.sys-NtSetWindowLongPtr-Privilege-Escalation.html - Exploit, Third Party Advisory, VDB Entry
References	~~() http://www.securityfocus.com/bid/94064 - Broken Link, Third Party Advisory, VDB Entry~~	() http://www.securityfocus.com/bid/94064 - Broken Link, Third Party Advisory, VDB Entry
References	~~() http://www.securitytracker.com/id/1037251 - Broken Link, Third Party Advisory, VDB Entry~~	() http://www.securitytracker.com/id/1037251 - Broken Link, Third Party Advisory, VDB Entry
References	~~() https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-135 - Patch, Vendor Advisory~~	() https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-135 - Patch, Vendor Advisory
References	~~() https://github.com/mwrlabs/CVE-2016-7255 - Third Party Advisory~~	() https://github.com/mwrlabs/CVE-2016-7255 - Third Party Advisory
References	~~() https://securingtomorrow.mcafee.com/mcafee-labs/digging-windows-kernel-privilege-escalation-vulnerability-cve-2016-7255/ - Broken Link~~	() https://securingtomorrow.mcafee.com/mcafee-labs/digging-windows-kernel-privilege-escalation-vulnerability-cve-2016-7255/ - Broken Link
References	~~() https://security.googleblog.com/2016/10/disclosing-vulnerabilities-to-protect.html - Third Party Advisory~~	() https://security.googleblog.com/2016/10/disclosing-vulnerabilities-to-protect.html - Third Party Advisory
References	~~() https://www.exploit-db.com/exploits/40745/ - Exploit, Third Party Advisory, VDB Entry~~	() https://www.exploit-db.com/exploits/40745/ - Exploit, Third Party Advisory, VDB Entry
References	~~() https://www.exploit-db.com/exploits/40823/ - Exploit, Third Party Advisory, VDB Entry~~	() https://www.exploit-db.com/exploits/40823/ - Exploit, Third Party Advisory, VDB Entry
References	~~() https://www.exploit-db.com/exploits/41015/ - Exploit, Third Party Advisory, VDB Entry~~	() https://www.exploit-db.com/exploits/41015/ - Exploit, Third Party Advisory, VDB Entry

25 Jul 2024, 13:56

Type	Values Removed	Values Added
CPE	cpe:2.3:o:microsoft:windows_7::sp1::::::* cpe:2.3:o:microsoft:windows_10:1511:::::::* cpe:2.3:o:microsoft:windows_server_2016:::::::: cpe:2.3:o:microsoft:windows_server_2008::sp2::::::* cpe:2.3:o:microsoft:windows_8.1:::::::: cpe:2.3:o:microsoft:windows_10:-:::::::* cpe:2.3:o:microsoft:windows_10:1607:::::::* cpe:2.3:o:microsoft:windows_rt_8.1:::::::: cpe:2.3:o:microsoft:windows_vista::sp2::::::*	cpe:2.3:o:microsoft:windows_vista:-:sp2:::::: cpe:2.3:o:microsoft:windows_rt_8.1:-:::::::* cpe:2.3:o:microsoft:windows_8.1:-:::::::* cpe:2.3:o:microsoft:windows_7:-:sp1:::::: cpe:2.3:o:microsoft:windows_server_2008:-:sp2:::::: cpe:2.3:o:microsoft:windows_10_1607:-:::::::* cpe:2.3:o:microsoft:windows_10_1507:-:::::::* cpe:2.3:o:microsoft:windows_server_2016:-:::::::* cpe:2.3:o:microsoft:windows_10_1511:-:::::::*
CWE	~~CWE-264~~	NVD-CWE-noinfo
References	~~() http://blog.trendmicro.com/trendlabs-security-intelligence/one-bit-rule-system-analyzing-cve-2016-7255-exploit-wild/ -~~	() http://blog.trendmicro.com/trendlabs-security-intelligence/one-bit-rule-system-analyzing-cve-2016-7255-exploit-wild/ - Broken Link
References	~~() http://packetstormsecurity.com/files/140468/Microsoft-Windows-Kernel-win32k.sys-NtSetWindowLongPtr-Privilege-Escalation.html -~~	() http://packetstormsecurity.com/files/140468/Microsoft-Windows-Kernel-win32k.sys-NtSetWindowLongPtr-Privilege-Escalation.html - Exploit, Third Party Advisory, VDB Entry
References	~~() http://www.securityfocus.com/bid/94064 - Third Party Advisory, VDB Entry~~	() http://www.securityfocus.com/bid/94064 - Broken Link, Third Party Advisory, VDB Entry
References	~~() http://www.securitytracker.com/id/1037251 -~~	() http://www.securitytracker.com/id/1037251 - Broken Link, Third Party Advisory, VDB Entry
References	~~() https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-135 -~~	() https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-135 - Patch, Vendor Advisory
References	~~() https://github.com/mwrlabs/CVE-2016-7255 -~~	() https://github.com/mwrlabs/CVE-2016-7255 - Third Party Advisory
References	~~() https://securingtomorrow.mcafee.com/mcafee-labs/digging-windows-kernel-privilege-escalation-vulnerability-cve-2016-7255/ -~~	() https://securingtomorrow.mcafee.com/mcafee-labs/digging-windows-kernel-privilege-escalation-vulnerability-cve-2016-7255/ - Broken Link
References	~~() https://www.exploit-db.com/exploits/40745/ -~~	() https://www.exploit-db.com/exploits/40745/ - Exploit, Third Party Advisory, VDB Entry
References	~~() https://www.exploit-db.com/exploits/41015/ -~~	() https://www.exploit-db.com/exploits/41015/ - Exploit, Third Party Advisory, VDB Entry
First Time		Microsoft windows 10 1507 Microsoft windows 10 1511 Microsoft windows 10 1607

Information

Published : 2016-11-10 07:00

Updated : 2024-11-21 02:57

NVD link : CVE-2016-7255

Mitre link : CVE-2016-7255

CVE.ORG link : CVE-2016-7255

JSON object : View

Products Affected

microsoft

windows_server_2008
windows_8.1
windows_server_2016
windows_10_1511
windows_server_2012
windows_vista
windows_7
windows_10_1607
windows_10_1507
windows_rt_8.1

CWE

NVD-CWE-noinfo

7.8 /10