Security Update for Microsoft Virtual Hard Disk Driver

Description

These vulnerabilites have following impacts: Elevation of Privilege. An attacker who successfully exploited Elevation of Privilege vulnerability would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerabilities and take control over an affected system.

Analysis

This security update resolves vulnerabilities in Microsoft Windows. The Windows Virtual Hard Disk Driver improperly handles user access to certain files. An attacker could manipulate files in locations not intended to be available to the user by exploiting this vulnerability.

Affected Applications

Windows 8.1
Windows Server 2012
Windows Server 2012 R2
Windows 10
Windows Server 2016

CVE References

CVE-2016-7223 CVE-2016-7224 CVE-2016-7225 CVE-2016-7226

Other References

https://technet.microsoft.com/en-us/library/security/ms16-138