PT-2016-1999 · Microsoft · Windows 10+1

Publicado 2016-05-10 · Atualizado 2018-10-12 · CVE-2016-0181

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows 10 versions Gold and 1511

Description The issue is related to errors in security settings, allowing a local attacker to bypass the Virtual Secure Mode Hypervisor Code Integrity protection mechanism. This can be achieved via a crafted application, enabling the attacker to perform RWX markings of kernel-mode pages.

Recommendations For Microsoft Windows 10 versions Gold and 1511, consider applying security patches or configuration changes to mitigate the risk of exploitation, however, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-254

Identificadores relacionados

BDU:2016-01333

CVE-2016-0181

Produtos afetados

Windows 10

Windows

Referências · 7

• http://technet.microsoft.com/security/bulletin/MS16-066 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-066 · Aviso do Fabricante
• http://securitytracker.com/id/1035843 · Nota
• http://securityfocus.com/bid/90048 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-0181 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-0181 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2016-01333 · Nota de Segurança