Medium severity5.5NVD Advisory· Published Sep 14, 2016· Updated May 6, 2026

CVE-2016-3371

Description

The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 does not properly enforce permissions, which allows local users to obtain sensitive information via a crafted application, aka "Windows Kernel Elevation of Privilege Vulnerability."

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.securityfocus.com/bid/92814nvd
www.securitytracker.com/id/1036802nvd
docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-111nvd
www.exploit-db.com/exploits/40429/nvd

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.032
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000