CVE-2016-1715

CVE-2016-1715 describes a denial-of-service and privilege escalation vulnerability in the swin.sys kernel driver of McAfee Application Control (MAC) on 32-bit Windows systems. Specifically, versions 6.1.0 through 6.2.0 are affected before their respective patched builds. A local attacker can trigger memory corruption and a system crash or gain elevated privileges by issuing a specific syscall that writes a zero to an arbitrary kernel memory location. The vulnerability has a CVSS v3.0 score of 6.6 (Medium), indicating a local attack vector with high attack complexity, requiring user interaction. The potential impact includes low confidentiality and integrity, but high availability impact. There is no evidence of active exploitation in the wild, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered significant attention.