HTTP: Microsoft Windows CVE-2016-0070 Privilege Escalation

This signature detects attempts to exploit a known vulnerability against Microsoft Win32k Windows. A successful attack can lead to privilege escalation.

Extended Description

The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitive information in the registry, aka "Windows Kernel Local Elevation of Privilege Vulnerability."

Affected Products

Microsoft windows_rt_8.1

References

CVE: CVE-2016-0070

Short Name

HTTP:STC:DL:CVE-2016-0070-PE

Severity

Minor

Recommended

True

Recommended Action

Drop

HTTP: Microsoft Windows CVE-2016-0070 Privilege Escalation

Extended Description

Affected Products

References

Found a potential security threat?