High severity7.8NVD Advisory· Published Aug 9, 2016· Updated May 6, 2026
CVE-2016-3300
CVE-2016-3300
Description
The Netlogon service in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1 improperly establishes secure communications channels, which allows local users to gain privileges by leveraging access to a domain-joined machine, aka "Netlogon Elevation of Privilege Vulnerability."
Affected products
4- cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-101nvdPatchVendor Advisory
- www.securityfocus.com/bid/92296nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1036576nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.