CVE-2016-0179

EPSS 19.24%
Veröffentlicht 11.05.2016 01:59:18
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle secure@microsoft.com
CVE-Watchlists
Login
Unerledigt
Login

Windows Shell in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Shell Remote Code Execution Vulnerability."

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Windows 10

Microsoft ≫ Windows 10 Version1511

Microsoft ≫ Windows 8.1

Microsoft ≫ Windows Rt 8.1

Microsoft ≫ Windows Server 2012 Versionr2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	19.24%	0.951

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

http://www.securityfocus.com/bid/89868

http://www.securitytracker.com/id/1035825

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-057

https://nvd.nist.gov/vuln/detail/CVE-2016-0179

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-0179

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-0179

EUVD