CVE-2016-3320

Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow attackers to bypass the Secure Boot protection mechanism by leveraging (1) administrative or (2) physical access to install a crafted boot manager, aka "Secure Boot Security Feature Bypass."

• CWE-254

• http://www.securityfocus.com/bid/92304Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1036573Third Party Advisory, VDB Entry
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-100Patch, Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MVB6Y2TVKSOBTIIBRUAJUIH3LQHMHCAG/
• http://www.securityfocus.com/bid/92304Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1036573Third Party Advisory, VDB Entry
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-100Patch, Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MVB6Y2TVKSOBTIIBRUAJUIH3LQHMHCAG/

Published

Aug 9, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-3314Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-3315Microsoft OneNote 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1,…
• CVE-2016-3316Microsoft Word 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac…
• CVE-2016-3317Microsoft Office 2010 SP2, Word 2007 SP3, Word 2010 SP2, Wor…
• CVE-2016-3318Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT S…
• CVE-2016-3319The PDF library in Microsoft Windows 8.1, Windows Server 201…
• CVE-2016-3321Microsoft Internet Explorer 10 and 11 load different files f…
• CVE-2016-3322Microsoft Internet Explorer 11 and Edge allow remote attacke…
• CVE-2016-3323Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-3324Microsoft Internet Explorer 9 through 11 allows remote attac…
• CVE-2016-3325Microsoft Internet Explorer 11 and Microsoft Edge allow remo…
• CVE-2016-3326Microsoft Internet Explorer 9 through 11 and Edge allow remo…