Description
Multiple serious vulnerabilities have been found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information or gain privileges.
Below is a complete list of vulnerabilities:
- An improper handling of objects in memory while running a Windows Crypto driver in kernel mode can be exploited locally via a specially designed application to obtain sensitive information;
- Improper sanitizing of input (which leads to an insecure library loading behavior) in the Windows Installer can be exploited locally via a specially designed application to gain privileges;
- An improper handling of objects in memory in the Windows Common Log File System (CLFS) can be exploited locally via a specially designed application to obtain sensitive information from process memory.
Original advisories
- MS16-153
- CVE-2016-7271
- CVE-2016-7273
- CVE-2016-7272
- CVE-2016-7257
- CVE-2016-7281
- CVE-2016-7279
- CVE-2016-7278
- CVE-2016-7283
- CVE-2016-7282
- CVE-2016-7292
- CVE-2016-7274
- CVE-2016-7295
- CVE-2016-7219
- CVE-2016-7258
- CVE-2016-7259
- CVE-2016-7260
Exploitation
Public exploits exist for this vulnerability.
Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.
CVE list
- CVE-2016-7271 critical
- CVE-2016-7273 critical
- CVE-2016-7272 critical
- CVE-2016-7257 high
- CVE-2016-7281 high
- CVE-2016-7279 critical
- CVE-2016-7278 high
- CVE-2016-7283 critical
- CVE-2016-7282 high
- CVE-2016-7292 critical
- CVE-2016-7274 critical
- CVE-2016-7295 high
- CVE-2016-7219 high
- CVE-2016-7258 high
- CVE-2016-7259 critical
- CVE-2016-7260 critical
KB list
- 3208481
- 3205386
- 3205383
- 3205401
- 3205400
- 3205408
- 3205409
- 3207752
- 3205394
- 3206632
- 3196726
- 3203838
- 3196348
- 3204724
- 3204808
- 3205638
- 3204723
Read more
Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com
Found an inaccuracy in the description of this vulnerability? Let us know!