CVE-2016-0181 - Microsoft Windows 10 Gold and 1511 allows local users to bypass the Virtual Secure Mode Hypervisor C

CVE-2016-0181

Summary

Microsoft Windows 10 Gold and 1511 allows local users to bypass the Virtual Secure Mode Hypervisor Code Integrity (HVCI) protection mechanism and perform RWX markings of kernel-mode pages via a crafted application, aka "Hypervisor Code Integrity Security Feature Bypass."

References

Vulnerable Configurations

cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*

CVSS

Base:	2.1 (as of 12-10-2018 - 22:11)
Impact:
Exploitability:

CWE

CWE-254

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	PARTIAL	NONE

cvss-vector via4

AV:L/AC:L/Au:N/C:N/I:P/A:N

msbulletin via4

bulletin_id	MS16-066
bulletin_url
date	2016-05-10T00:00:00
impact	Security Feature Bypass
knowledgebase_id	3155451
knowledgebase_url
severity	Important
title	Security Update for Virtual Secure Mode

refmap via4

bid	90048
sectrack	1035843

Last major update

12-10-2018 - 22:11

Published

11-05-2016 - 01:59

Last modified

12-10-2018 - 22:11