CVE-2016-3310
HighSummary
Kernel-mode drivers in Microsoft Windows allow local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability'.
Risk Assessment
This vulnerability may lead to unauthorized access to the system and execution of malicious operations by local users, posing a significant security threat to the organization.
Recommendation
It is recommended to update operating systems to the latest versions that include security patches addressing this vulnerability.
Other vulnerabilities in Sterowniki w trybie jądra systemu Microsoft Windows
See all- CVE-2017-0056High
Kernel-mode drivers in Microsoft Windows allow local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability.'
- CVE-2017-0025High
Kernel-mode drivers in Microsoft Windows allow local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability.'
- CVE-2016-3266High
Kernel-mode drivers in Microsoft Windows allow local users to gain elevated privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability'.
- CVE-2016-3311High
Kernel-mode drivers in Microsoft Windows allow local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability'.
- CVE-2016-3308High
Kernel-mode drivers in Microsoft Windows allow local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability'.
- CVE-2016-0196High
Kernel-mode drivers in Microsoft Windows allow local users to gain privileges via a crafted application, known as 'Win32k Elevation of Privilege Vulnerability'.
Original NVD description (English source)
The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3308, CVE-2016-3309, and CVE-2016-3311.