The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities :

  - Multiple elevation of privilege vulnerabilities exist in     the Windows kernel-mode driver due to improper handling     of objects in memory. A local attacker can exploit     these, via a specially crafted application, to execute     arbitrary code in kernel mode. (CVE-2016-3266,     CVE-2016-3376, CVE-2016-7185, CVE-2016-7191)

  - An elevation of privilege vulnerability exists in     Windows Transaction Manager due to improper handling of     objects in memory. A local attacker can exploit this,     via a specially crafted application, to execute     processes in an elevated context. (CVE-2016-3341)

Detections

Analytics

MS16-123: Security Update for Windows Kernel-Mode Drivers (3192892)

high Nessus Plugin ID 94012

Version 1.16