CVE-2016-7188

Summary

The Standard Collector Service in Windows Diagnostics Hub in Microsoft Windows 10 Gold, 1511, and 1607 mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Windows Diagnostics Hub Elevation of Privilege Vulnerability."

Impact & exploitability

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products we track (1)

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

Additional information

• NVD record
• http://www.securityfocus.com/bid/93359
• http://www.securitytracker.com/id/1036997
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-125
• https://www.exploit-db.com/exploits/40562/