What is the CVSS score of CVE-2016-0099?

CVE-2016-0099 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 90.4%.

Which versions of Microsoft are affected by CVE-2016-0099?

CVE-2016-0099 presents notable security risk, a buffer overflow vulnerability rated CVSS 7.8.. A patch is available.

Is there a public PoC exploit available for CVE-2016-0099?

Yes, a public proof-of-concept exploit is available for CVE-2016-0099. Prioritise patching immediately. EPSS: 90.4%.

How to fix or mitigate CVE-2016-0099?

Within 24 hours: Identify all affected systems and apply vendor patches immediately. If patching is delayed, consider network segmentation to limit exposure.

Microsoft CVE-2016-0099

HIGH

Classic Buffer Overflow (CWE-120)

2016-03-09 secure@microsoft.com

Buffer Overflow Microsoft

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Re-analysis Queued

Apr 21, 2026 - 15:22 vuln.today

cvss_changed

Analysis Generated

Mar 26, 2026 - 11:18 vuln.today

Added to CISA KEV

Oct 22, 2025 - 00:15 cisa

CISA KEV

PoC Detected

Oct 22, 2025 - 00:15 vuln.today

Public exploit code

Patch released

Oct 22, 2025 - 00:15 nvd

Patch available

CVE Published

Mar 09, 2016 - 11:59 nvd

HIGH 7.8

DescriptionCVE.org

The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 does not properly process request handles, which allows local users to gain privileges via a crafted application, aka "Secondary Logon Elevation of Privilege Vulnerability."

AnalysisAI

Windows Secondary Logon Service improperly processes request handles, allowing local users to escalate privileges to SYSTEM on Windows Vista through Windows 10 via a crafted application.

Technical ContextAI

The CWE-120 buffer overflow in the Secondary Logon Service (seclogon.dll) occurs during handle duplication. An attacker can craft requests that cause the service to impersonate the calling token with elevated privileges, then hijack the impersonation context.

RemediationAI

Apply Microsoft security update MS16-032. Modern Windows versions have addressed this class of vulnerability. Ensure least-privilege principle is enforced.

CVE-2016-0099 vulnerability details – vuln.today

Back

Microsoft CVE-2016-0099

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

Share

External POC / Exploit Code