CVE-2016-7218: Infoleak

Published Nov 10, 2016

Updated

Bowser.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to obtain sensitive information via a crafted application, aka "Windows Bowser.sys Information Disclosure Vulnerability."

Affected Software

12 affected components

Microsoft Windows 10

Microsoft Windows 10=1511

Microsoft Windows 10=1607

Microsoft Windows 7=sp1

Microsoft Windows 8.1

Microsoft Windows RT 8.1

Microsoft Windows Server 2008=sp2

Microsoft Windows Server 2008=r2-sp1

Microsoft Windows Server 2012=gold

Microsoft Windows Server 2012=r2

Microsoft Windows Server 2016

Microsoft Windows Vista=sp2

Event History

Nov 10, 2016

CVE Published

via MITRE·06:16 AM

Data Sourced

via MITRE·06:16 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-7218?

CVE-2016-7218 has a severity rating that allows local users to obtain sensitive information from the affected systems.

How do I fix CVE-2016-7218?

To fix CVE-2016-7218, apply the latest security updates released by Microsoft for your affected Windows version.

Which systems are affected by CVE-2016-7218?

CVE-2016-7218 affects Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1, Windows 10, and multiple versions of Windows Server.

Can CVE-2016-7218 be exploited remotely?

CVE-2016-7218 requires local access, meaning it cannot be exploited remotely.

Is there a patch available for CVE-2016-7218?

Yes, Microsoft has released patches for CVE-2016-7218 and users should ensure they are installed.