Microsoft · Win32k
CVE-2016-7255
Microsoft Win32k Privilege Escalation Vulnerability
What it is
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."
CISA: Microsoft Win32k kernel-mode driver fails to properly handle objects in memory which allows for privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.
What to do
Apply updates per vendor instructions.
Deadline for US federal agencies: May 3, 2022
- Added to the CISA list
- November 3, 2021
- Published
- November 10, 2016
- Severity
- High 7.8 CVSS 3.1
- Chance of attacks in the next 30 days (EPSS)
- 81% in the top 0.4% of all known vulnerabilities
- Weakness
- CWE-264
- More details
- NVD · CVE.org · CISA
All references (11)
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-135
- http://packetstormsecurity.com/files/140468/Microsoft-Windows-Kernel-win32k.sys-NtSetWindowLongPtr-Privilege-…
- https://github.com/mwrlabs/CVE-2016-7255
- https://www.exploit-db.com/exploits/40823/
- https://www.exploit-db.com/exploits/41015/
- https://securingtomorrow.mcafee.com/mcafee-labs/digging-windows-kernel-privilege-escalation-vulnerability-cve…
- https://www.exploit-db.com/exploits/40745/
- http://www.securitytracker.com/id/1037251
- http://blog.trendmicro.com/trendlabs-security-intelligence/one-bit-rule-system-analyzing-cve-2016-7255-exploi…
- http://www.securityfocus.com/bid/94064
- https://security.googleblog.com/2016/10/disclosing-vulnerabilities-to-protect.html
More exploited flaws from Microsoft
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Jun 22, 2023 | Privilege Escalation | Win32k | High 7.8 | 14% |
| May 9, 2023 | Privilege Escalation | Win32k | High 7.8 | 41% |
| May 25, 2022 | Privilege Escalation | Win32k | High 8.8 | 15% |
| May 23, 2022 | Privilege Escalation | Win32k | High 7.8 | 3.0% |
| May 4, 2022 | Privilege Escalation | Win32k | High 7.8 | 87% |
| Apr 25, 2022 | Privilege Escalation | Win32k | High 7.8 | 1.6% |
| Apr 25, 2022 | Privilege Escalation | Win32k | High 7.8 | 1.6% |
| Mar 28, 2022 | Privilege Escalation | Win32k | High 7.8 | 39% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.