CVE-2016-7247

EUVD-2016-8103
Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow physically proximate attackers to bypass the Secure Boot protection mechanism via a crafted boot policy, aka "Secure Boot Component Vulnerability."
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 96%
Affected Products (NVD)
VendorProductVersion
microsoftwindows_10
-
microsoftwindows_8.1
*
microsoftwindows_rt_8.1
*
microsoftwindows_server_2012
-
microsoftwindows_server_2016
*
𝑥
= Vulnerable software versions
Windows Releases
Platform
Version
Windows 10
(x64, x86)
KB3198585
1511 (x64, x86)
KB3198586
1607 (x64, x86)
KB3200970
Windows 8.1
(x64, x86)
KB3197874
Windows RT 8.1
All
KB3197874
Windows Server 2012
Server Core
KB3197877
Standard
KB3197877
Windows Server 2012 R2
Server Core
KB3197874
Standard
KB3197874
Windows Server 2016
Server Core
KB3200970
Standard
KB3200970
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/94058
http://www.securitytracker.com/id/1037255
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-140
https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05340049
http://www.securityfocus.com/bid/94058
http://www.securitytracker.com/id/1037255
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-140
https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05340049