Privilege escalation and information disclosure vulnerabilities in Microsoft Windows

Description

Multiple serious vulnerabilities have been found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information or gain privileges.

Below is a complete list of vulnerabilities:

1. An improper handling of objects in memory while running a Windows Crypto driver in kernel mode can be exploited locally via a specially designed application to obtain sensitive information;
2. Improper sanitizing of input (which leads to an insecure library loading behavior) in the Windows Installer can be exploited locally via a specially designed application to gain privileges;
3. An improper handling of objects in memory in the Windows Common Log File System (CLFS) can be exploited locally via a specially designed application to obtain sensitive information from process memory.

Original advisories

• MS16-149

• MS16-153
• CVE-2016-7271
• CVE-2016-7273
• CVE-2016-7272
• CVE-2016-7257
• CVE-2016-7281
• CVE-2016-7279
• CVE-2016-7278
• CVE-2016-7283
• CVE-2016-7282
• CVE-2016-7292
• CVE-2016-7274
• CVE-2016-7295
• CVE-2016-7219
• CVE-2016-7258
• CVE-2016-7259
• CVE-2016-7260

Exploitation

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

• Microsoft-Windows-Vista-4
• Microsoft-Windows-Server-2012
• Microsoft-Windows-8
• Microsoft-Windows-7
• Microsoft-Windows-Server-2008
• Microsoft-Windows-10

CVE list

• CVE-2016-7271
  warning
• CVE-2016-7273
  critical
• CVE-2016-7272
  critical
• CVE-2016-7257
  warning
• CVE-2016-7281
  warning
• CVE-2016-7279
  critical
• CVE-2016-7278
  warning
• CVE-2016-7283
  critical
• CVE-2016-7282
  warning
• CVE-2016-7292
  high
• CVE-2016-7274
  critical
• CVE-2016-7295
  warning
• CVE-2016-7219
  warning
• CVE-2016-7258
  warning
• CVE-2016-7259
  high
• CVE-2016-7260
  high

KB list

• 3208481
• 3205386
• 3205383
• 3205401
• 3205400
• 3205408
• 3205409
• 3207752
• 3205394
• 3206632
• 3196726
• 3203838
• 3196348
• 3204724
• 3204808
• 3205638
• 3204723

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com