CVE-2016-0099

Published Mar 9, 2016 CVSS 3.1 · 7.8 High EPSS 37.0% KEV · Listed
Description
The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 does not properly process request handles, which allows local users to gain privileges via a crafted application, aka "Secondary Logon Elevation of Privilege Vulnerability."

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics kev

{'dateAdded': '2022-03-03'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
microsoft
Published
Updated
Oct 21, 2025, 11:55 PM
Reserved
Dec 4, 2015, 12:00 AM
Status
Analyzed
Published
Mar 9, 2016, 11:59 AM
Modified
Jun 17, 2026, 12:36 AM