Microsoft Windows Transaction Manager Elevation of Privilege (MS16-123: CVE-2016-3341; CVE-2016-3341)

An elevation of privilege vulnerability has been reported in Microsoft Windows Kernel Transaction Manager. The vulnerability is due to an malformed blf file, which could be abused by attackers to gain local privilege escalation. The attacker must entice the victim to run an executable file to exploit this vulnerability.