CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2016-04-12
Windows CSRSS Process Token Mismanagement Local Privilege Escalation Vulnerability (CVE-2016-0151, MS16-048)
[Affected Scope] Microsoft Windows 8.1, Windows Server 2012 and R2, Windows RT 8.1, and Windows 10 (Gold and 1511).
[Impact] A local attacker can execute a crafted application to exploit improper token management in CSRSS, gaining elevated SYSTEM privileges and executing arbitrary code.
[Mitigation] Apply the official Microsoft security updates (MS16-048) immediately and restrict local execution privileges on unpatched systems.