CVE-2016-7273

Опубликовано: 20 дек. 2016

Источник: nvd

CVSS3: 8.8

CVSS2: 9.3

EPSS Средний

Описание

The Graphics component in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Graphics Remote Code Execution Vulnerability."

Ссылки

http://www.securityfocus.com/bid/94752
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037438
Third Party Advisory
VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-146
http://www.securityfocus.com/bid/94752
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037438
Third Party Advisory
VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-146

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*

EPSS

Процентиль: 96%

0.23064

Средний

8.8 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-19

Связанные уязвимости

CVE-2016-7273

CVSS3: 4.2

msrc

больше 8 лет назад

Windows Graphics Component Remote Code Execution Vulnerability

GHSA-mhcq-4jc9-fpfq