Rapid7 Vulnerability & Exploit Database

MS16-090: Security Update for Windows Kernel-Mode Drivers (3171481)

Free InsightVM Trial No Credit Card Necessary
2024 Attack Intel Report Latest research by Rapid7 Labs
Back to Search

MS16-090: Security Update for Windows Kernel-Mode Drivers (3171481)

Severity
7
CVSS
(AV:L/AC:L/Au:N/C:C/I:C/A:C)
Published
07/12/2016
Created
07/25/2018
Added
07/12/2016
Modified
11/18/2021

Description

Elevation of privilege vulnerabilities exist when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited these vulnerabilities could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

Solution(s)

  • WINDOWS-HOTFIX-MS16-084-22658655-0e69-4d2c-ace5-64d42eeb0e6f
  • WINDOWS-HOTFIX-MS16-084-7f722a3c-887f-41db-ae8a-a0fee28b4ae5
  • WINDOWS-HOTFIX-MS16-084-ac8d2656-7f38-4645-9b76-b43bc0f125bd
  • WINDOWS-HOTFIX-MS16-084-f227a554-3fe1-4e74-af64-0bd89596ca41
  • WINDOWS-HOTFIX-MS16-090-0ea45233-270f-4305-b504-dba1cd1135ca
  • WINDOWS-HOTFIX-MS16-090-38e2023e-bc9f-4b44-9902-d5d05133082b
  • WINDOWS-HOTFIX-MS16-090-47584346-d21a-4f26-ab79-07af983067f1
  • WINDOWS-HOTFIX-MS16-090-51debf95-be83-49ed-889d-6977d9700101
  • WINDOWS-HOTFIX-MS16-090-63e67e7c-75ba-4ae7-9e22-9a9e2c3fe019
  • WINDOWS-HOTFIX-MS16-090-6da20f61-7472-4cc7-a86f-20f36537c793
  • WINDOWS-HOTFIX-MS16-090-75dce599-a291-4b10-835e-2c6b4e6fd879
  • WINDOWS-HOTFIX-MS16-090-8a6be5b4-d45c-4088-a9b0-85f11ba12782
  • WINDOWS-HOTFIX-MS16-090-8ecd7bf8-8fba-40a1-9c13-ab6d4a79ecee
  • WINDOWS-HOTFIX-MS16-090-91f7147e-2427-46e3-9eb3-7ba9fc6861d5
  • WINDOWS-HOTFIX-MS16-090-a9880f03-3aba-4aa6-bc13-0981a544efea
  • WINDOWS-HOTFIX-MS16-090-b7b156c2-1b73-4bb4-8ca4-7adef4cf3f69
  • WINDOWS-HOTFIX-MS16-090-bfe2d5d9-5310-4aa1-a567-b20448587f19
  • WINDOWS-HOTFIX-MS16-090-c1efeb0f-a619-4518-b809-b8088b75be81
  • WINDOWS-HOTFIX-MS16-090-d1ffddcd-ebd2-4c11-a8a0-9b738fdd31b1
  • WINDOWS-HOTFIX-MS16-090-d22f7b38-e8c5-4df4-80e0-5219332c5dec
  • WINDOWS-HOTFIX-MS16-090-ee4454ad-0f6b-4c9e-bcf6-ec7df2b14c23
  • WINDOWS-HOTFIX-MS16-090-f61c809e-53e1-4a28-883f-0888e6c0c9d5

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;