CVE-2016-3341: Critical severity Microsoft Windows 10 vulnerability
Published Oct 14, 2016
·Updated
The kernel-mode drivers in Transaction Manager in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Windows Transaction Manager Elevation of Privilege Vulnerability."
Affected Software
7 affected components
Microsoft Windows 10
Microsoft Windows 10=1511
Microsoft Windows 10=1607
Microsoft Windows 8.1
Microsoft Windows RT 8.1
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
Event History
Oct 14, 2016
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
Which systems are affected?
Exposure is limited to the listed Windows releases: Windows 8.1, Windows RT 8.1, Windows Server 2012 and 2012 R2, and Windows 10 Gold, 1511, and 1607.
2
What does an attacker need to exploit this vulnerability?
An attacker needs local access and must run a crafted application. The CVSS vector indicates no privileges are required, but user interaction is required.
3
What is the impact of successful exploitation?
Successful exploitation can give a local attacker elevated privileges and can affect confidentiality, integrity, and availability.