PT-2016-4088
CVE-2016-0079
·
Published
2016-10-11
·
Updated
2018-10-12
Description by
CVSS 3.1
5.0
MediumMetricsAV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Microsoft Windows 10 versions Gold, 1511, and 1607
Description
The issue allows local users to gain privileges via a crafted application that makes an API call to access sensitive information in the registry. An elevation-of-privilege vulnerability is present, which allows attackers to affect the system.
Recommendations
For Microsoft Windows 10 versions Gold, 1511, and 1607, consider restricting access to sensitive registry information until a patch is available.
As a temporary workaround, consider disabling API calls that access sensitive information in the registry until the issue is resolved.
Found an issue in the description? Have something to add? Feel free to write us 👾