CVE-2016-0099

Producto

Microsoft / Windows

Vulnerabilidad

Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability

Añadido a KEV

3 mar 2022

Remediar antes de

24 mar 2022

Uso conocido en ransomware

Sí

Descripción resumida

A privilege escalation vulnerability exists in Microsoft Windows if the Windows Secondary Logon Service fails to properly manage request handles in memory. An attacker who successfully exploited this vulnerability could run arbitrary code as an administrator.

Acción requerida

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2016-0099