NVD

Id
21737  
Name
CVE-2016-7221  
Description
Input Method Editor (IME) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 mishandles DLL loading, which allows local users to gain privileges via unspecified vectors, aka "Windows IME Elevation of Privilege Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-11-10  
Modified Date
2016-11-28  
Seq
2016-7221  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
116792 21737 CVE-2016-7221 MS16-130  View
116793 21737 CVE-2016-7221 94021  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
5029 JVNDB-2016-005802 複数の Microsoft Windows 製品の Windows 入力方式エディターにおける権限昇格の脆弱性 複数の Microsoft Windows 製品の Windows 入力方式エディター (IME) は、DLL 読み込みを適切に処理しないため、権限を取得される脆弱性が存在します。 CVE-2016-7221 93728 CVE-2016-7221 21737 7.2 7.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005802.html 2016-11-08 2016-11-11 View