CVE-2016-3219 2

Vulnerability (CVE)

Windows Kernel Logic Bug Class: Access Mode Mismatch in IO Manager

Project Zero's James Forshaw documented a Windows kernel logic bug class in which the IO Manager's access mode handling can mismatch security access checking and memory access checking, with maximum impact of local privilege escalation if kernel and driver...

Vulnerabilities & Patching

A Shadow of our Former Self

Cyber Risks Google Project Zero

Google Project Zero's James Forshaw described a technique using shadow object directories, introduced in Windows 8, to recover symbolic link capability inside sandboxes and exploit file planting or TOCTOU attacks. He used it against CVE-2016-3219, a race...

Vulnerabilities & Patching