CVE-2016-8732
HIGHInvincea Dell Protected Workspace <5.1.1-22303 - Privilege Escalation
Title source: llmDescription
Multiple security flaws exists in InvProtectDrv.sys which is a part of Invincea Dell Protected Workspace 5.1.1-22303. Weak restrictions on the driver communication channel and additional insufficient checks allow any application to turn off some of the protection mechanisms provided by the Invincea product.
References (2)
Core 2
Core References
Broken Link, Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/99360
Exploit, Technical Description, Third Party Advisory x_refsource_misc
https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0246
Scores
CVSS v3
7.8
EPSS
0.0003
EPSS Percentile
8.9%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-275
Status
published
Products (1)
sophos/invincea_dell_protected_workspace
5.1.1-22303
Published
Apr 24, 2018
Tracked Since
Feb 18, 2026