CVE-2016-7238: High severity windows 10 vulnerability

Published Nov 10, 2016

Updated

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 mishandle caching for NTLM password-change requests, which allows local users to gain privileges via a crafted application, aka "Windows NTLM Elevation of Privilege Vulnerability."

Affected Software

12 affected components

Microsoft Windows 10

Microsoft Windows 10=1511

Microsoft Windows 10=1607

Microsoft Windows 7=sp1

Microsoft Windows 8.1

Microsoft Windows RT 8.1

Microsoft Windows Server 2008=sp2

Microsoft Windows Server 2008=r2-sp1

Microsoft Windows Server 2012

Microsoft Windows Server 2012=r2

Microsoft Windows Server 2016

Microsoft Windows Vista=sp2

Event History

Nov 10, 2016

CVE Published

via MITRE·06:16 AM

Data Sourced

via MITRE·06:16 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-7238?

CVE-2016-7238 has been assigned a medium severity rating due to its potential to allow local users to gain elevated privileges.

How do I fix CVE-2016-7238?

To fix CVE-2016-7238, apply the security update provided by Microsoft that corresponds to your affected version of Windows.

What versions of Windows are affected by CVE-2016-7238?

CVE-2016-7238 affects various versions including Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows 10, and several Windows Server versions.

What is the impact of CVE-2016-7238 on my system?

The impact of CVE-2016-7238 allows local users to gain elevated privileges, potentially compromising the security of the system.

When was CVE-2016-7238 disclosed?

CVE-2016-7238 was disclosed in November 2016 as part of a Microsoft security update.