PT-2016-2003

CVE-2016-0176

·

Published

2016-05-10

·

Updated

2018-10-12

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version dxgkrnl.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511
Description The issue is related to insufficient access restrictions in the dxgkrnl.sys file, a component of the DirectX Graphics kernel subsystem in the Windows operating system. Exploitation of this issue can allow a local attacker to elevate their privileges using a specially crafted application. This can affect the system, allowing attackers to gain privileges.
Recommendations For Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511, update to a version that includes the fix for the DirectX Graphics Kernel Subsystem Elevation of Privilege issue. As a temporary workaround, consider restricting access to the dxgkrnl.sys kernel driver to minimize the risk of exploitation. Avoid using the vulnerable dxgkrnl.sys component in the DirectX Graphics kernel subsystem until the issue is resolved.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾