CVE-2016-3308
HighSummary
Kernel-mode drivers in Microsoft Windows allow local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability'.
Risk Assessment
This vulnerability may lead to unauthorized access to the system and execution of malicious operations by local users, threatening the integrity and confidentiality of organizational data.
Recommendation
It is recommended to update operating systems to the latest versions and apply relevant security patches to mitigate the risk of exploitation of this vulnerability.
Other vulnerabilities in Sterowniki w trybie jądra systemu Microsoft Windows
See all- CVE-2017-0056High
Kernel-mode drivers in Microsoft Windows allow local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability.'
- CVE-2017-0025High
Kernel-mode drivers in Microsoft Windows allow local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability.'
- CVE-2016-3266High
Kernel-mode drivers in Microsoft Windows allow local users to gain elevated privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability'.
- CVE-2016-3311High
Kernel-mode drivers in Microsoft Windows allow local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability'.
- CVE-2016-3310High
Kernel-mode drivers in Microsoft Windows allow local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability'.
- CVE-2016-0196High
Kernel-mode drivers in Microsoft Windows allow local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability'.
Original NVD description (English source)
The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3309, CVE-2016-3310, and CVE-2016-3311.