{"uuid": "94bf3afd-d193-4082-81a1-251ea269604f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0099", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/ms16_032_secondary_logon_handle_privesc.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"x86, x64\", \"author\": [\"James Forshaw\", \"b33f\", \"khr0x40sh\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits the lack of sanitization of standard handles in Windows' Secondary\\n          Logon Service.  The vulnerability is known to affect versions of Windows 7-10 and 2k8-2k12\\n          32 and 64 bit.  This module will only work against those versions of Windows with\\n          Powershell 2.0 or later and systems with two or more CPU cores.\", \"disclosure_date\": \"2016-03-21\", \"fullname\": \"exploit/windows/local/ms16_032_secondary_logon_handle_privesc\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:46 +0000\", \"name\": \"MS16-032 Secondary Logon Handle Privilege Escalation\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [], \"SideEffects\": [], \"Stability\": []}, \"path\": \"/modules/exploits/windows/local/ms16_032_secondary_logon_handle_privesc.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/local/ms16_032_secondary_logon_handle_privesc\", \"references\": [\"MSB-MS16-032\", \"CVE-2016-0099\", \"URL-https://twitter.com/FuzzySec/status/723254004042612736\", \"URL-https://googleprojectzero.blogspot.co.uk/2016/03/exploiting-leaked-thread-handle.html\"], \"rport\": null, \"session_types\": [\"meterpreter\"], \"targets\": [\"Windows x86\", \"Windows x64\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:11.714422Z"}