Umbra Wiki cve cve/CVE-2016-7255
Back to wiki

CVE-2016-7255 — Microsoft Win32k Privilege Escalation Vulnerability

provenance: imported · CVE: CVE-2016-7255 · CWE: CWE-264

CVE-2016-7255: Microsoft Win32k Privilege Escalation Vulnerability

CISA Known Exploited Vulnerability (KEV)

Vendor / project Microsoft
Product Win32k
Date added 2021-11-03
Due date 2022-05-03
Ransomware campaign use Known

Description

Microsoft Win32k kernel-mode driver fails to properly handle objects in memory which allows for privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2016-7255

Weakness behind it

CISA records this vulnerability as an instance of CWE-264. From there the chain continues into CAPEC attack patterns and ATT&CK techniques, all inside this corpus.

References

  • NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-7255
  • KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

See all 1,745 pages under Vulnerabilities (CVE) →

Related pages