CVEvulnerability

CVE-2016-3258

4.7 MEDIUM Published 2016-07-13 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-07-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
4.7 MEDIUM — CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
1.2 LOW — AV:L/AC:H/Au:N/C:N/I:P/A:N
Weaknesses
CWE-264, CWE-362

Description

Race condition in the kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to bypass the Low Integrity protection mechanism and write to files by leveraging unspecified object-manager features, aka "Windows File System Security Feature Bypass."

Affected configurations

• microsoft windows 10 • microsoft windows 10 1511 • microsoft windows 8.1 • microsoft windows rt 8.1 • microsoft windows server 2012 • microsoft windows server 2012 r2

Related

Weakness · not in database (1)

Weakness · CWE (1)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

References