VulnerabilityModified
CVE-2016-7225
Virtual Hard Disk Driver in Windows 10 Gold, 1511, and 1607 and Windows Server 2016 does not properly restrict access to files, which allows local users to gain privileges via a crafted application, aka "VHD Driver Elevation of Privilege Vulnerability."
MEDIUM 6.1EPSS 4.11%
Does this matter?
Lower severity and a low EPSS score (4.11%). Track it; it rarely justifies an emergency change on its own.
Description
Virtual Hard Disk Driver in Windows 10 Gold, 1511, and 1607 and Windows Server 2016 does not properly restrict access to files, which allows local users to gain privileges via a crafted application, aka "VHD Driver Elevation of Privilege Vulnerability."
- CVSS 3.0
- 6.1 MEDIUMCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
- EPSS
- 4.11% probability · 90th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-284
- Affected
- microsoft/windows 10 · microsoft/windows server 2016
- Source
- secure@microsoft.com
References
- http://www.securityfocus.com/bid/94016
- http://www.securitytracker.com/id/1037248
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-138
- https://www.exploit-db.com/exploits/40764/
- http://www.securityfocus.com/bid/94016
- http://www.securitytracker.com/id/1037248
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-138
- https://www.exploit-db.com/exploits/40764/
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.