CISA description
The Client-Server Run-time Subsystem (CSRSS) in Microsoft mismanages process tokens, which allows local users to gain privileges via a crafted application.
CVE-2016-0151 Ransomware
Microsoft · Client-Server Run-time Subsystem (CSRSS)
Microsoft Windows CSRSS Security Feature Bypass Vulnerability
Required action
Apply updates per vendor instructions.
Notes & references
Where this lands in 800-53
Vulnerability data triggers these controls during assessment and continuous monitoring.