CVE-2016-8732

PoC —

CVSS 3.1

7.8 high

EPSS

<1%p46

Published

Apr 24, 2018 (Apr 24, 2018)

Modified

Jun 17, 2026

Description

Multiple security flaws exists in InvProtectDrv.sys which is a part of Invincea Dell Protected Workspace 5.1.1-22303. Weak restrictions on the driver communication channel and additional insufficient checks allow any application to turn off some of the protection mechanisms provided by the Invincea product.

Vendors: sophos
Products: invincea dell protected workspace
Weakness: CWE-275
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news2 stories

Vulnerabilities in Pre-Installed Software expose Dell Systems to hack

Security AffairsJul 4, 20:28 UTC · Jul 4, 2017Vulnerability CVE-2016-9038 CVE-2016-8732 CVE-2017-2802

Vulnerability Spotlight: Dell Precision Optimizer and Invincea Vulnerabilities

Cisco TalosJun 30, 18:05 UTC · Jun 30, 2017Vulnerability CVE-2016-9038 CVE-2016-8732 CVE-2017-2802