This security update resolves a vulnerability in Microsoft Windows that could allow Information Disclosure when the Windows Common Log File System (CLFS) driver improperly handles objects in memory. In a local attack scenario, an attacker could exploit this vulnerability by running a specially crafted application to bypass security measures on the affected system allowing further exploitation.
To learn more about the vulnerability, see Microsoft Security Bulletin MS16-153.
To learn more about the vulnerability, see Microsoft Security Bulletin MS16-153.