CVE-2016-7292 in Microsoft Windows
Summary
The Installer in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Windows Installer Elevation of Privilege Vulnerability."
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
09/09/2016
Disclosure
12/20/2016
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 94454 | Microsoft Windows Installer data processing | 19 | Not defined | Official fix | CVE-2016-7292 |