DLL Loading Privilege Escalation in Microsoft Windows Products
CVE-2016-0014

7.8HIGH

Key Information:

Vendor
Microsoft
Status
Windows Server 2008
Windows Server 2012
Windows Rt
Windows 10
Vendor
CVE Published:
13 January 2016

Summary

An issue exists within Microsoft Windows that improperly handles Dynamic Link Library (DLL) loading, enabling local users to exploit this flaw to gain elevated privileges through a specially crafted application. This vulnerability affects various versions of Microsoft Windows, including Vista, Server 2008, 7, 8, 8.1, and 10, creating potential risks for system integrity and user access control.

References

https://docs.microsoft.com/en-us/security-updates/securit...
vendor-advisoryx_refsource_MS
http://www.securitytracker.com/id/1034661
vdb-entryx_refsource_SECTRACK

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.