CVE-2016-3309 — Microsoft Windows Kernel Privilege Escalation Vulnerability

provenance: imported · CVE: CVE-2016-3309

CVE-2016-3309: Microsoft Windows Kernel Privilege Escalation Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	Microsoft
Product	Windows
Date added	2022-03-15
Due date	2022-04-05
Ransomware campaign use	Known

Description

A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2016-3309

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-3309
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog