PT-2016-1999 · Microsoft · Windows 10+1

Published 2016-05-10 · Updated 2018-10-12 · CVE-2016-0181

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows 10 versions Gold and 1511

Description The issue is related to errors in security settings, allowing a local attacker to bypass the Virtual Secure Mode Hypervisor Code Integrity protection mechanism. This can be achieved via a crafted application, enabling the attacker to perform RWX markings of kernel-mode pages.

Recommendations For Microsoft Windows 10 versions Gold and 1511, consider applying security patches or configuration changes to mitigate the risk of exploitation, however, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-254

Related Identifiers

BDU:2016-01333

CVE-2016-0181

Affected Products

Windows 10

Windows

References · 7

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-066 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-0181 · Security Note
• https://osv.dev/vulnerability/CVE-2016-0181 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-01333 · Security Note
• http://technet.microsoft.com/security/bulletin/MS16-066 · Note
• http://securitytracker.com/id/1035843 · Note
• http://securityfocus.com/bid/90048 · Note