CVE-2016-7273 — Microsoft Windows 10 vulnerability

CWE-196 documents5 sources
Severity
8.8HIGHNVD
OSV5.5
EPSS
21.2%
top 4.32%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
9
Linux KernelMicrosoft Windows 10Msrc Windows 10 FOR 32-bit Systems+6 more
Timeline
PublishedDec 20
Latest updateMay 14

Description

The Graphics component in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Graphics Remote Code Execution Vulnerability."

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages9 packages

▶NVDmicrosoft/windows_101511, 1607+1

🔴Vulnerability Details

2
GHSA
GHSA-mhcq-4jc9-fpfq: The Graphics component in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allows remote attackers to execute arbitrary code via a cr↗2022-05-14
▶
OSV
linux vulnerabilities↗2017-08-28
▶

📋Vendor Advisories

1
Microsoft
Windows Graphics Component Remote Code Execution Vulnerability↗2016-12-13
▶

🕵️Threat Intelligence

2
Talos
Microsoft Patch Tuesday - December 2016↗2016-12-13
▶
Talos
Microsoft Patch Tuesday - December 2016↗2016-12-13
▶