Kaspersky ID:
KLA10924
Дата обнаружения:
13/12/2016
Обновлено:
22/01/2024

Описание

Multiple serious vulnerabilities have been found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information or gain privileges.

Below is a complete list of vulnerabilities:

  1. An improper handling of objects in memory while running a Windows Crypto driver in kernel mode can be exploited locally via a specially designed application to obtain sensitive information;
  2. Improper sanitizing of input (which leads to an insecure library loading behavior) in the Windows Installer can be exploited locally via a specially designed application to gain privileges;
  3. An improper handling of objects in memory in the Windows Common Log File System (CLFS) can be exploited locally via a specially designed application to obtain sensitive information from process memory.

Первичный источник обнаружения

Эксплуатация

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

Список CVE

  • CVE-2016-7271
    warning
  • CVE-2016-7273
    critical
  • CVE-2016-7272
    critical
  • CVE-2016-7257
    warning
  • CVE-2016-7281
    warning
  • CVE-2016-7279
    critical
  • CVE-2016-7278
    warning
  • CVE-2016-7283
    critical
  • CVE-2016-7282
    warning
  • CVE-2016-7292
    high
  • CVE-2016-7274
    critical
  • CVE-2016-7295
    warning
  • CVE-2016-7219
    warning
  • CVE-2016-7258
    warning
  • CVE-2016-7259
    high
  • CVE-2016-7260
    high

Список KB

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com

Нашли неточность в описании этой уязвимости? Дайте нам знать!
Kaspersky IT Security Calculator:
Оцените ваш профиль кибербезопасности
Узнать больше
Встречай новый Kaspersky!
Каждая минута твоей онлайн-жизни заслуживает топовой защиты.
Узнать больше
Confirm changes?
Your message has been sent successfully.