PT-2016-2916

CVE-2016-7247

·

Published

2016-11-08

·

Updated

2018-10-12

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 8.1, 10 (Gold, 1511, 1607), Windows Server 2012 (Gold and R2), Windows Server 2016, and Windows RT 8.1
Description The issue is related to insufficient access control in the Windows operating system, allowing attackers to bypass the Secure Boot protection mechanism. This can be achieved by exploiting the vulnerability with a crafted boot policy, potentially enabling remote attackers to affect the system.
Recommendations For Microsoft Windows versions 8.1, 10 (Gold, 1511, 1607), Windows Server 2012 (Gold and R2), Windows Server 2016, and Windows RT 8.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾