Microsoft Windows Kernel Privilege Escalation Vulnerability

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Aug 9, 2016 · Catalog

   Detected

   The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3308, CVE-2016-3310, and CVE-2016-3311.

2. Mar 15, 2022 · CISA KEV

   Known exploited

   Apply updates per vendor instructions.

3. Apr 5, 2022 · CISA KEV

   Remediation due

   Apply updates per vendor instructions.

4. Jun 16, 2026 · Catalog

   Updated

   The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3308, CVE-2016-3310, and CVE-2016-3311.

Affected

• cpe microsoft/windows 10 1507version unspecified
• cpe microsoft/windows 10 1511version unspecified
• cpe microsoft/windows 10 1607version unspecified
• cpe microsoft/windows 7version unspecified
• cpe microsoft/windows 8.1version unspecified
• cpe microsoft/windows rt 8.1version unspecified
• cpe microsoft/windows server 2008version unspecified
• cpe microsoft/windows server 2008r2
• vendor Microsoft Windowsversion unspecified

Sources

• CISA KEVConfirmed exploitationCVE-2016-3309

  A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.

  cisa.gov
• CVE.orgVulnerability recordCVE-2016-3309

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2016-3309

  30-day exploitation probability 20.5%

  first.org
• Exploit DatabasePublic exploit reference42960

  Public archive entry. The exploit body is not stored here.

  exploit-db.com
• NIST NVDVulnerability recordCVE-2016-3309

  The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k

  nvd.nist.gov

References

• Broken Link · securityfocus.com
• Broken Link · securitytracker.com
• Patch · docs.microsoft.com
• CISA note · nvd.nist.gov
• Broken Link · exploit-db.com