Intrusion PreventionMS.Windows.Win32kfull.Graphical.Components.Privilege.Elevation
Description
This indicates an attack attempt to exploit a Privilege Escalation vulnerability in Microsoft Windows.
The vulnerability is due to an error when the vulnerable software handles a maliciously crafted application file. A remote attacker may be able to exploit this to execute arbitrary code within the context of the application, via a crafted application file.
Affected Products
Windows Vista
Windows Server 2008
Windows Server 2008 R2
Windows 8.1
Windows Server 2012 and Windows Server 2012 R2
Windows RT 8.1
Windows 10
Impact
Privilege Escalation: Remote attackers can leverage their privileges on vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
http://technet.microsoft.com/security/bulletin/MS16-098
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 42820 |
| Created | Aug 09, 2016 |
| Updated | May 02, 2022 |
| Risk |
|
| CVE ID | CVE-2016-3311 |
| Exploit Prediction Score | 0.04% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |