Vulnerability Database

311,379

Total vulnerabilities in the database

CVE-2016-3372

The kernel API in Microsoft Windows Vista SP2 and Windows Server 2008 SP2 does not properly enforce permissions, which allows local users to spoof processes, spoof inter-process communication, or cause a denial of service via a crafted application, aka "Windows Kernel Elevation of Privilege Vulnerability."

  • Published: Sep 14, 2016
  • Updated: Nov 9, 2025
  • CVE: CVE-2016-3372
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 3.6
  • AV:L/AC:L/Au:N/C:N/I:P/A:P

CWEs: