Privilege escalation in Microsoft products - CVE-2016-3341
Published: October 11, 2016 / Updated: February 2, 2017
Vulnerability identifier: #VU970
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2016-3341
CWE-ID: CWE-119
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to obtain elevated privileges on the target system.
The vulnerability exists due to improper handling of objects in memory. By running a malicious program on the affected system attackers can gain root privileges on the system that may lead to complete compromise of the system.
Successful exploitation of this vulnerability will allow the local attacker to obtain elevated privileges on vulnerable system.
The vulnerability exists due to improper handling of objects in memory. By running a malicious program on the affected system attackers can gain root privileges on the system that may lead to complete compromise of the system.
Successful exploitation of this vulnerability will allow the local attacker to obtain elevated privileges on vulnerable system.
Affected software
Windows RT
Microsoft Windows
Windows Server
Microsoft Windows
Windows Server
How to mitigate CVE-2016-3341
Cybersecurity Help is currently unaware of any official patch addressing the vulnerability.