{"schema_version":"1","data":[{"id":2765,"advisory_id":"8368ca6a-546e-45cb-8278-e9e8ef5b8f29","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3309","source_published_at":"2022-03-15T00:00:00+00:00","published_at":"2026-10-24T21:23:59.022041+00:00","extraction_method":"structured","technologies":["core-kev","windows"],"cve_ids":["CVE-2016-3309"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Windows Kernel Privilege Escalation Vulnerability","summary":"A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2016-3309","products":[{"name":{"value":"Windows","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2016-3309","aliases":["CVE-2016-3309"],"affected":[],"modified":"2022-03-15T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-264"],"cveID":"CVE-2016-3309","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-3309","dueDate":"2022-04-05","product":"Windows","dateAdded":"2022-03-15","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.","vulnerabilityName":"Microsoft Windows Kernel Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2016-3309","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}}],"next_after":2765,"next_before":2765}