← Back

CVE-2016-3349

nvd nist
Published: Sep 14, 2016Modified: May 6, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

The kernel-mode drivers in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."

Affected (6)

Microsoft
4 products
Windows 10
Windows 8.1
Windows Rt 8.1
Windows Server 2012
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
Windows 10
All versions
Windows 10
Version 1511
Windows 8.1
All versions
Windows Rt 8.1
All versions
Microsoft
Windows Server 2012
All versions
Windows Server 2012
Version r2

Related CWEs

CWE-264
CWE-264

References (6)

Source: secure@microsoft.com
Source: secure@microsoft.com
Source: secure@microsoft.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.