CVEvulnerability
CVE-2016-7225
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2016-11-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.1 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
- CVSS 2.0 ([email protected])
- 3.6 LOW — AV:L/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-284
Description
Virtual Hard Disk Driver in Windows 10 Gold, 1511, and 1607 and Windows Server 2016 does not properly restrict access to files, which allows local users to gain privileges via a crafted application, aka "VHD Driver Elevation of Privilege Vulnerability."
Affected configurations
• microsoft windows 10
• microsoft windows 10 1511
• microsoft windows 10 1607
• microsoft windows server 2016
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- http://www.securityfocus.com/bid/94016 www.securityfocus.com
- http://www.securitytracker.com/id/1037248 www.securitytracker.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-138 docs.microsoft.com
- https://www.exploit-db.com/exploits/40764/ www.exploit-db.com
- http://www.securityfocus.com/bid/94016 www.securityfocus.com
- http://www.securitytracker.com/id/1037248 www.securitytracker.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-138 docs.microsoft.com
- https://www.exploit-db.com/exploits/40764/ www.exploit-db.com