Vulnerability Details CVE-2016-3309
The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3308, CVE-2016-3310, and CVE-2016-3311.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.477
EPSS Ranking 97.6%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 7.2
Proposed Action
A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.
Ransomware Campaign
Known
References
- http://www.securityfocus.com/bid/92297
- http://www.securitytracker.com/id/1036572
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-098
- https://www.exploit-db.com/exploits/42960/
- http://www.securityfocus.com/bid/92297
- http://www.securitytracker.com/id/1036572
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-098
- https://www.exploit-db.com/exploits/42960/
Products affected by CVE-2016-3309
-
cpe:2.3:o:microsoft:windows_10_1507:-
-
cpe:2.3:o:microsoft:windows_10_1511:-
-
cpe:2.3:o:microsoft:windows_10_1607:-
-
cpe:2.3:o:microsoft:windows_7:-
-
cpe:2.3:o:microsoft:windows_8.1:-
-
cpe:2.3:o:microsoft:windows_rt_8.1:-
-
cpe:2.3:o:microsoft:windows_server_2008:-
-
cpe:2.3:o:microsoft:windows_server_2008:r2
-
cpe:2.3:o:microsoft:windows_server_2012:-
-
cpe:2.3:o:microsoft:windows_server_2012:r2
-
cpe:2.3:o:microsoft:windows_vista:-