CVE-2016-3305
HighSummary
The kernel in various versions of Windows mishandles session objects, allowing local users to hijack sessions and gain elevated privileges via a crafted application.
Risk Assessment
Session hijacking by local users can lead to unauthorized access to system resources and data, posing a significant security threat to the organization.
Recommendation
It is recommended to update operating systems to the latest versions that include security patches addressing this vulnerability.
Other vulnerabilities in Jądro systemu Windows
See all- CVE-2016-3306High
The kernel in various versions of Windows mishandles session objects, allowing local users to hijack sessions and gain elevated privileges via a crafted application.
- CVE-2016-0180High
The kernel in various versions of Windows mishandles symbolic links, allowing local users to gain elevated privileges via a crafted application.
- CVE-2015-6174High
The kernel in various versions of Windows allows local users to gain elevated privileges via a crafted application, known as 'Windows Kernel Memory Elevation of Privilege Vulnerability'.
- CVE-2015-6173High
The kernel in various versions of Windows allows local users to gain elevated privileges via a crafted application, known as 'Windows Kernel Memory Elevation of Privilege Vulnerability'.
- CVE-2015-6171High
The kernel in various versions of Windows allows local users to gain elevated privileges via a crafted application, known as 'Windows Kernel Memory Elevation of Privilege Vulnerability'.
- CVE-2015-2553High
The kernel in various versions of Windows mishandles junctions during mountpoint creation, allowing local users to gain elevated privileges by leveraging certain sandbox access.
- CVE-2015-2550High
The kernel in various versions of Windows allows local users to gain elevated privileges via a crafted application, known as 'Windows Elevation of Privilege Vulnerability.'
- CVE-2015-2549High
The kernel in various versions of Windows allows local users to gain elevated privileges via a crafted application, known as 'Windows Kernel Memory Corruption Vulnerability.'
- CVE-2015-0075High
The kernel in Windows Server 2003 SP2, Vista SP2, Server 2008 SP2 and R2 SP1, and Windows 7 SP1 does not properly constrain impersonation levels, allowing local users to gain privileges via a crafted application.
Original NVD description (English source)
The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 mishandles session objects, which allows local users to hijack sessions, and consequently gain privileges, via a crafted application, aka "Windows Session Object Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3306.