CVE-2016-0087 — Microsoft Windows Server 2008 vulnerability

CWE-2645 documents3 sources
Severity
7.8HIGHNVD
EPSS
0.9%
top 23.69%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Windows Server 2008
Timeline
PublishedMar 9
Latest updateMay 14

Description

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 do not properly validate handles, which allows local users to gain privileges via a crafted application, aka "Windows Elevation of Privilege Vulnerability."

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages1 packages

🔴Vulnerability Details

1
GHSA
GHSA-7pq8-69x3-976q: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 do not properly validate handles, which allows local users to gain↗2022-05-14
▶

🕵️Threat Intelligence

3
Talos
Vulnerability Spotlight: Local Code Execution via the Intel HD Graphics Windows Kernel Driver↗2016-07-11
▶
Talos
Microsoft Patch Tuesday - March 2016↗2016-03-08
▶
Talos
Microsoft Patch Tuesday - March 2016↗2016-03-08
▶