93357vdb entry
http://www.securityfocus.com/bid/93357 CVE-2016-0079
MEDIUM
Microsoft Windows - NtLoadKeyEx Read Only Hive Arbitrary File Write Privilege Escalation (MS16-124)
Record summary
CVE-2016-0079 has a selected CVSS score of 5.0 (medium); EIP currently links 1 catalogued exploit.
Description
The kernel in Microsoft Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitive information in the registry, aka "Windows Kernel Local Elevation of Privilege Vulnerability."
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBMicrosoft Windows - NtLoadKeyEx Read Only Hive Arbitrary File Write Privilege Escalation (MS16-124)ExploitDB exploitby Google Security ResearchNot analyzed1 file
References
4MS16-124Vendor advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-124 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2016-0079 40608exploit
https://www.exploit-db.com/exploits/40608