CVE-2016-3300

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 8.1 Microsoft Windows Server versions 2012 Gold and R2 Microsoft Windows RT versions 8.1

Description The issue is related to the improper establishment of secure communications channels by the Netlogon service, allowing local users to gain privileges by leveraging access to a domain-joined machine. This can enable an attacker to elevate their privileges.

Recommendations For Microsoft Windows 8.1, consider restricting access to the Netlogon service until a patch is available. For Microsoft Windows Server 2012 Gold and R2, restrict access to the Netlogon service to minimize the risk of exploitation. For Microsoft Windows RT 8.1, avoid using the Netlogon service in domain-joined machines until the issue is resolved.