Security Vulnerabilities fixed in SAM and LSAD Remote Protocols MS16-047

Description

This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow elevation of privilege if an attacker launches a man-in-the-middle (MiTM) attack. An attacker could then force a downgrade of the authentication level of the RPC channel and impersonate an authenticated user.

Affected Applications

Windows 7
Windows Server 2008 R2
Windows 8.1
Windows Server 2012
Windows Server 2012 R2
Windows RT 8.1
Windows 10

CVE References

Other References