漏洞类别：Windows
漏洞等级： 
漏洞信息
An elevation of privilege vulnerability exists in the Windows Diagnostics Hub Standard Collector Service when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input that could lead to unsecure library loading behavior.
The security update addresses the vulnerability by correcting how the Windows Diagnostics Hub Standard Collector Service sanitizes input, to help preclude unintended elevated system privileges.
This security update is rated Important for all supported editions of Windows 10.
漏洞危害
Successful exploitation allows an attacker to execute arbitrary code with elevated system privileges.
解决方案
Refer to MS16-125 for more information.
Patch:
Following are links for downloading patches to fix the vulnerabilities:
MS16-125: Windows 10 for 32-bit Systems
MS16-125: Windows 10 for x64-based Systems
MS16-125: Windows 10 Version 1511 for 32-bit Systems
MS16-125: Windows 10 Version 1511 for x64-based Systems
0day
文章评论