CISA Known Exploited Vulnerability

CVE-2016-3309 Ransomware

Microsoft · Windows

Microsoft Windows Kernel Privilege Escalation Vulnerability

Date added
BOD 22-01 due date
CWE CWE-264
Ransomware Known

CISA description

A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.

Required action

Apply updates per vendor instructions.