Information Disclosure in Microsoft Windows Crypto Driver
CVE-2016-7219

5.5MEDIUM

Key Information:

Vendor

Microsoft
Status
Windows Rt 8.1
Windows Server 2012
Windows Server 2016
Windows 7
Vendor
CVE Published:
20 December 2016

What is CVE-2016-7219?

The Windows Crypto Driver in various Microsoft Windows operating systems is susceptible to an information disclosure vulnerability. This flaw allows local users to leverage a crafted application to gain unauthorized access to sensitive information. Affecting Windows Vista, Windows Server editions, and multiple versions of Windows 10, this vulnerability underscores the importance of applying the latest security updates to safeguard sensitive data.

References

http://www.securityfocus.com/bid/94764
vdb-entryx_refsource_BID
https://docs.microsoft.com/en-us/security-updates/securit...
vendor-advisoryx_refsource_MS
http://www.securitytracker.com/id/1037450
vdb-entryx_refsource_SECTRACK

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.