### CVE-2016-7255

#### Describe

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."

#### ImpactVersion

| Product             | CPU Architecture | Version | Update | Tested             |
| ------------------- | ---------------- | ------- | ------ | ------------------ |
| Windows 10          | x86/x64          |         |        | &#10004; |
| Windows 10          | x86/x64          | 1511    |        | &#10004; |
| Windows 10          | x86/x64          | 1607    |        |                    |
| Windows 7           | x86/x64          |         | SP1    | &#10004; |
| Windows 8.1         | x86/x64          |         |        | &#10004; |
| Windows Rt 8.1      |                  |         |        |                    |
| Windows Server 2008 | x86/x64          |         | SP2    | &#10004; |
| Windows Server 2008 | x86/x64          | R2      | SP1    | &#10004; |
| Windows Server 2012 |                  |         |        |                    |
| Windows Server 2012 |                  | R2      |        |                    |
| Windows Server 2016 |                  |         |        |                    |
| Windows Vista       |                  |         | SP2    |                    |

#### Patch

```
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-7255
```

#### Utilization

CompilerEnvironment

- VS2019（V140）X64 Release

This vulnerability kills all affected system X64 versions, three Exp can be used，Currently `Windows_7_8_10_2008_x64` Moreover in folder and `CVE-2016-7255.ps1`Kill all systems，`CVE-2016-7255_windows_2008_x64`Folder files can be used on Windows Server 2008 R2 SP1 X64, Windows 7 SP1 X64 system can cause blue screen

Demo through the PS script, directly on the GIF map

![3](https://raw.github.com/Ascotbe/Image/master/Kernelhub/CVE-2016-7255_win7_x86.gif) 

#### Analyze
- https://www.anquanke.com/post/id/85232