CVE-2016-3219

Description

The kernel-mode driver in Microsoft Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka Win32k Elevation of Privilege Vulnerability.

Risk Information

Base Score
7.8
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
12.622

Associated Vulnerability

VulnerabilityOS Platform
Microsoft Edge Security Feature Bypass Vulnerability for Windows 10 Version 1511 for x64-based Systems (KB3163018) - CumulativeWindows
Microsoft Edge Security Feature Bypass Vulnerability for Windows 10 Version 1511 (KB3163018) - CumulativeWindows
Microsoft Edge Security Feature Bypass Vulnerability for Windows 10 for x64-based Systems (KB3163017) - CumulativeWindows
Windows Graphics Component Information Disclosure Vulnerability for Windows Server 2008 x64 Edition (KB3164035)Windows
Windows Graphics Component Information Disclosure Vulnerability for Windows Server 2008 (KB3164035)Windows
Windows Graphics Component Information Disclosure Vulnerability for Windows Vista for x64-based Systems (KB3164035)Windows
Windows Graphics Component Information Disclosure Vulnerability for Windows Vista (KB3164035)Windows
Windows Graphics Component Information Disclosure Vulnerability for Windows Server 2008 R2 x64 Edition (KB3164035)Windows
Windows Graphics Component Information Disclosure Vulnerability for Windows 7 for x64-based Systems (KB3164035)Windows
Windows Graphics Component Information Disclosure Vulnerability for Windows 7 (KB3164035)Windows
Windows Graphics Component Information Disclosure Vulnerability for Windows Server 2012 (KB3164035)Windows
Windows Graphics Component Information Disclosure Vulnerability for Windows Server 2012 R2 (KB3164035)Windows
Windows Graphics Component Information Disclosure Vulnerability for Windows 8.1 for x64-based Systems (KB3164035)Windows
Windows Graphics Component Information Disclosure Vulnerability for Windows 8.1 (KB3164035)Windows
Windows Graphics Component Information Disclosure Vulnerability for Windows Server 2008 x64 Edition (KB3164033)Windows
Windows Graphics Component Information Disclosure Vulnerability for Windows Server 2008 (KB3164033)Windows
Windows Graphics Component Information Disclosure Vulnerability for Windows Vista for x64-based Systems (KB3164033)Windows
Windows Graphics Component Information Disclosure Vulnerability for Windows Vista (KB3164033)Windows
Windows Graphics Component Information Disclosure Vulnerability for Windows 7 for x64-based Systems (KB3164033)Windows
Windows Graphics Component Information Disclosure Vulnerability for Windows 7 (KB3164033)Windows
Windows Graphics Component Information Disclosure Vulnerability for Windows Server 2008 R2 x64 Edition (KB3164033)Windows
Windows Graphics Component Information Disclosure Vulnerability for Windows Server 2012 (KB3164033)Windows
Windows Graphics Component Information Disclosure Vulnerability for Windows Server 2012 R2 (KB3164033)Windows
Windows Graphics Component Information Disclosure Vulnerability for Windows 8.1 for x64-based Systems (KB3164033)Windows
Windows Graphics Component Information Disclosure Vulnerability for Windows 8.1 (KB3164033)Windows
Windows Graphics Component Information Disclosure Vulnerability for Windows 10 (KB3163017)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-20782Cumulative Update for Windows 10 Version 1511 for x64-based Systems (KB3163018)
PATCH-20781Cumulative Update for Windows 10 Version 1511 (KB3163018)
PATCH-20780Cumulative Update for Windows 10 for x64-based Systems (KB3163017)
PATCH-20863Security Update for Windows Server 2008 x64 Edition (KB3164035)
PATCH-20859Security Update for Windows Server 2008 (KB3164035)
PATCH-20862Security Update for Windows Vista for x64-based Systems (KB3164035)
PATCH-20858Security Update for Windows Vista (KB3164035)
PATCH-20865Security Update for Windows Server 2008 R2 x64 Edition (KB3164035)
PATCH-20864Security Update for Windows 7 for x64-based Systems (KB3164035)
PATCH-20860Security Update for Windows 7 (KB3164035)
PATCH-20868Security Update for Windows Server 2012 R2 (KB3164035)
PATCH-20867Security Update for Windows 8.1 for x64-based Systems (KB3164035)
PATCH-20861Security Update for Windows 8.1 (KB3164035)
PATCH-20852Security Update for Windows Server 2008 x64 Edition (KB3164033)
PATCH-20848Security Update for Windows Server 2008 (KB3164033)
PATCH-20851Security Update for Windows Vista for x64-based Systems (KB3164033)
PATCH-20847Security Update for Windows Vista (KB3164033)
PATCH-20853Security Update for Windows 7 for x64-based Systems (KB3164033)
PATCH-20849Security Update for Windows 7 (KB3164033)
PATCH-20854Security Update for Windows Server 2008 R2 x64 Edition (KB3164033)
PATCH-20855Security Update for Windows Server 2012 (KB3164033)
PATCH-20857Security Update for Windows Server 2012 R2 (KB3164033)
PATCH-20856Security Update for Windows 8.1 for x64-based Systems (KB3164033)
PATCH-20850Security Update for Windows 8.1 (KB3164033)
PATCH-20779Cumulative Update for Windows 10 (KB3163017)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234