CVE Vulnerabilities

CVE-2016-0180

Published: May 11, 2016 | Modified: Oct 12, 2018
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mishandles symbolic links, which allows local users to gain privileges via a crafted application, aka Windows Kernel Elevation of Privilege Vulnerability.

Affected Software

Name Vendor Start Version End Version
Windows_10 Microsoft * *
Windows_10 Microsoft 1511 (including) 1511 (including)
Windows_7 Microsoft * *
Windows_7 Microsoft –sp1 (including) –sp1 (including)
Windows_8.1 Microsoft * *
Windows_rt_8.1 Microsoft * *
Windows_server_2008 Microsoft * *
Windows_server_2008 Microsoft r2-sp1 (including) r2-sp1 (including)
Windows_server_2012 Microsoft * *
Windows_server_2012 Microsoft r2 (including) r2 (including)
Windows_vista Microsoft * *

References