CVE-2016-7223 Microsoft Windows Security Update for Microsoft Virtual Hard Disk Driver (MS16-138)

Multiple elevation of privilege vulnerabilities exist when the Windows Virtual Hard Disk Driver fails to properly handle user access to certain files.

The security update addresses the vulnerabilities by correcting how the kernel API restricts access to these files.

This security update is rated Important for of Windows 8.1, Windows Server 2012, Windows Server 2012 R2, Windows RT 8.1, Windows 10, and Windows Server 2016.

An attacker who successfully exploited the vulnerabilities could manipulate files in locations not intended to be available to the user.

Customers are advised to view MS16-138 for instructions pertaining to the remediation of these vulnerabilities.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

MS16-138: Windows ( Microsoft Virtual Hard Disk Driver )