← Back

CVE-2016-3320

nvd nist
Published: Aug 9, 2016Modified: May 6, 2026

JSON object

Loading...
4.9
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Exploitability: 1.2 / Impact: 3.6
Source: NVD

Description

Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow attackers to bypass the Secure Boot protection mechanism by leveraging (1) administrative or (2) physical access to install a crafted boot manager, aka "Secure Boot Security Feature Bypass."

Affected (7)

Microsoft
4 products
Windows 10
Windows 8.1
Windows Rt 8.1
Windows Server 2012
Fedoraproject
1 product
Fedora
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
Windows 10
All versions
Windows 10
Version 1511
Windows 8.1
All versions
Windows Rt 8.1
All versions
Microsoft
Windows Server 2012
All versions
Windows Server 2012
Version r2
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Fedora
Version 25

Related CWEs

CWE-254
CWE-254

References (8)

Source: secure@microsoft.com
Third Party AdvisoryVDB Entry
Source: secure@microsoft.com
Third Party AdvisoryVDB Entry
Source: secure@microsoft.com
PatchVendor Advisory
Source: secure@microsoft.com
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.