{"cvss":0.0,"datePublished":"2022-03-28","dateUpdated":"2022-03-28","description":"The Client-Server Run-time Subsystem (CSRSS) in Microsoft mismanages process tokens, which allows local users to gain privileges via a crafted application.","dueDate":"2022-04-18","id":"CVE-2016-0151","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Known","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-0151","product":"Client-Server Run-time Subsystem (CSRSS)","requiredAction":"Apply updates per vendor instructions.","severity":"CRITICAL","source":"cisa_known_exploited","title":"Microsoft Windows CSRSS Security Feature Bypass Vulnerability","vendor":"Microsoft"}