Win32k Elevation of Privilege Vulnerability for Windows Server 2012 R2 (KB3153199)

Risk Information

Base Score
7.8
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
No records found

CVE Information

Patch Details

Patch associated with this vulnerability is supported by ManageEngine.

Patch ID
20627

Patch Description
Security Update for Windows Server 2012 R2 (KB3153199)

References

http://packetstormsecurity.com/files/137502/Windows-7-win32k-Bitmap-Use-After-Free.html
http://packetstormsecurity.com/files/137503/Windows-7-win32k-Bitmap-Use-After-Free.html
http://technet.microsoft.com/security/bulletin/MS16-062
http://www.securityfocus.com/bid/89860
http://www.securityfocus.com/bid/90027
http://www.securityfocus.com/bid/90052
http://www.securityfocus.com/bid/90064
http://www.securityfocus.com/bid/90065
http://www.securityfocus.com/bid/90101
http://www.securityfocus.com/bid/90102
http://www.securitytracker.com/id/1035841
http://www.zerodayinitiative.com/advisories/ZDI-16-278
http://www.zerodayinitiative.com/advisories/ZDI-16-279
http://www.zerodayinitiative.com/advisories/ZDI-16-280
http://www.zerodayinitiative.com/advisories/ZDI-16-281
http://www.zerodayinitiative.com/advisories/ZDI-16-284
https://bugs.chromium.org/p/project-zero/issues/detail?id=747
https://www.exploit-db.com/exploits/39959/
https://www.exploit-db.com/exploits/39960/
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-0175
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-0196