6.1med
CVE-2016-7223
Virtual Hard Disk Driver in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Wi…
Published 9 y ago · modified 4 mo ago · JSON
CVSS
6.1
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.4%
percentile 73%
Public exploits
0
none known
Summary
Virtual Hard Disk Driver in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 does not properly restrict access to files, which allows local users to gain privileges via a crafted application, aka "VHD Driver Elevation of Privilege Vulnerability."
Exploit prediction (EPSS)
1.40% probability of exploitation in the next 30 days, higher than 73% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 6.1 | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N |
| NVD | 2.0 | 3.6 | AV:L/AC:L/Au:N/C:P/I:P/A:N |
Classification
- Weakness
- CWE-284 Improper Access Control
References
- securityfocus.com /bid/94003 · vdb-entry, x_refsource_BID, x_transferred
- securitytracker.com /id/1037248 · vdb-entry, x_refsource_SECTRACK, x_transferred
- docs.microsoft.com /en-us/security-updates/securitybulletins/2016/ms16-138 · vendor-advisory, x_refsource_MS, x_transferred
Sources
- CVE List: CVE-2016-7223
- NVD: CVE-2016-7223
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.