CVE-2016-3309

High · 7.8 CISA KEV · ransomware

CVSS

7.8

EPSS

20.5%

Published

Aug 9, 2016

CISA due date

Apr 5, 2022

The record

The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3308, CVE-2016-3310, and CVE-2016-3311.

Affected packages

Ecosystem	Package	Introduced	Fixed