CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2016-03-09
Microsoft Windows Secondary Logon Local Privilege Escalation Vulnerability (CVE-2016-0099, MS16-032)
[Affected Scope] Windows Vista SP2, 7 SP1, 8.1, 10, and Windows Server 2008, 2012 R2 with Secondary Logon service enabled
[Impact] Local authenticated attackers can execute arbitrary code with SYSTEM privileges via a crafted application, leading to complete system compromise
[Mitigation] Apply the official MS16-032 security patch immediately, or disable the Secondary Logon (seclogon) service as a temporary workaround