CVEvulnerability
CVE-2016-3300
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2016-08-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The Netlogon service in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1 improperly establishes secure communications channels, which allows local users to gain privileges by leveraging access to a domain-joined machine, aka "Netlogon Elevation of Privilege Vulnerability."
Affected configurations
• microsoft windows 8.1
• microsoft windows rt 8.1
• microsoft windows server 2012
• microsoft windows server 2012 r2
Related
Weakness · not in database (1)
References
- http://www.securityfocus.com/bid/92296 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1036576 Third Party Advisory, VDB Entry
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-101 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/92296 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1036576 Third Party Advisory, VDB Entry
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-101 Patch, Vendor Advisory