CVE-2016-0175: Infoleak
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to obtain sensitive information about kernel-object addresses, and consequently bypass the KASLR protection mechanism, via a crafted application, aka "Win32k Information Disclosure Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-0175?
CVE-2016-0175 has a medium severity rating due to its potential for local users to gain sensitive information.
How do I fix CVE-2016-0175?
To fix CVE-2016-0175, ensure that your Microsoft Windows operating system is updated to the latest patches provided by Microsoft.
Which versions of Windows are affected by CVE-2016-0175?
CVE-2016-0175 affects multiple versions including Windows Vista SP2, Windows 7 SP1, Windows 8.1, and Windows 10 among others.
What kind of information can be exposed by CVE-2016-0175?
CVE-2016-0175 can expose sensitive information regarding kernel-object addresses to local users.
Can CVE-2016-0175 be exploited remotely?
No, CVE-2016-0175 requires local access to the system for exploitation.