CVE-2016-0151 Microsoft Client-Server Run-Time Subsystem (CSRSS)
The Client-Server Run-time Subsystem (CSRSS) in Microsoft mismanages process tokens, which allows local users to gain privileges via a crafted application.
- CVSS
- not scored
On CISA’s exploited list
Microsoft Windows CSRSS Security Feature Bypass Vulnerability
- Added
- 2022-03-28
- Federal patch deadline
- 2022-04-18
- Ransomware use
- known