CVE-2016-0099
Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability
Microsoft WindowsOperating systems
CVSS
7.8HighExploit odds (EPSS)37.0%Chance of exploitation activity in the next 30 days, higher than 98% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
CISA required actionApply updates per vendor instructions. CISA KEV
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Timeline
- 9 Mar 2016, 11:00 UTCPublishedCVE List
- 21 Mar 2016Exploit code publicMetasploit
- 3 Mar 2022Added to CISA KEVCISA KEV
Public exploit code and templates 5
- Exploit moduleMS16-032 Secondary Logon Handle Privilege Escalation 21 Mar 2016Metasploit
- Local exploitMicrosoft Windows 7 < 10 / 2008 < 2012 (x86/x64) - Local Privilege Escalation (MS16-032) 25 Apr 2016Exploit-DB
- Local exploitMicrosoft Windows 7 < 10 / 2008 < 2012 (x86/x64) - Secondary Logon Handle Privilege Escalation (MS16-032) (Metasploit) 13 Jul 2016Exploit-DB
- Local exploitMicrosoft Windows 7 < 10 / 2008 < 2012 R2 (x86/x64) - Local Privilege Escalation (MS16-032) (PowerShell) 21 Apr 2016Exploit-DB
- Local exploitMicrosoft Windows 8.1/10 (x86) - Secondary Logon Standard Handles Missing Sanitization Privilege Escalation (MS16-032) 21 Mar 2016Exploit-DB
Listed so defenders can prioritize. Threatline links to the source and does not host exploit code.
Description
A privilege escalation vulnerability exists in Microsoft Windows if the Windows Secondary Logon Service fails to properly manage request handles in memory. An attacker who successfully exploited this vulnerability could run arbitrary code as an administrator.
Text from CVE List
Affected versions 1
- n/aaffected: n/aCVE List
References 7
- docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-032Advisoryvia CVE List
- exploit-db.com/exploits/40107/Exploitvia CVE List
- exploit-db.com/exploits/39719/Exploitvia CVE List
- exploit-db.com/exploits/39809/Exploitvia CVE List
- exploit-db.com/exploits/39574/Exploitvia CVE List
- nvd.nist.gov/vuln/detail/CVE-2016-0099Referencevia CISA KEV
- cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-0099Referencevia CVE List