CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1–1 of 1 advisories (Page 1/1)
CVE-2016-33097.8/HIGHEPSS 20.5%CISA KEV
2016-08-09

Microsoft Windows Win32k Kernel-Mode Driver Local Privilege Escalation Vulnerability (CVE-2016-3309, MS16-098)

[Affected Scope] Multiple legacy Windows operating systems including Windows Vista SP2, 7 SP1, 8.1, 10, and Windows Server 2008, 2012

[Impact] Local attackers can execute arbitrary code in kernel mode via a crafted application, gaining complete control of the affected system

[Mitigation] Apply the official Microsoft security patch (MS16-098) immediately, and migrate end-of-life operating systems to supported versions