Vendor / Project: Microsoft Product: Windows Description: A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. Required Action: Apply updates per vendor instructions. Due Date: 2022-04-05 Ransomware Campaign Use: Known CWEs: CWE-264 Notes: https://nvd.nist.gov/vuln/detail/CVE-2016-3309
CVE-2016-3309 — Microsoft Windows Kernel Privilege Escalation Vulnerability
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2022-03-15 00:00 UTC
- Importiert: 2026-10-20 22:46 UTC
- CVSS: 7.8
- Quelle-ID:
cisa_kev - uid_hash:
3b1cd0f675b3e4d7dc0bf4cfe7ba36b9d72dc9618dfedd72c2396765e69a13d3
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
HIGH |
7.8 |
HIGH |
7.8 |
2016-08-09 |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CISA – Known Exploited Vulnerabilities (KEV) | threat_intel | cisa, kev | - | de | https://raw.githubusercontent.com/cisagov/kev-data/develop/known_exploited_vulnerabilities.json |