---
id: 8738
title: "Exploiting a Leaked Thread Handle"
source_domain: projectzero.google
source_url: "https://projectzero.google/2016/03/exploiting-leaked-thread-handle.html"
published_at: "2016-03-21T00:00:00Z"
tags: ["privilege-escalation", "windows", "exploitation", "handle-leak", "ms16-032"]
phying_url: "https://phying.com/item/8738"
lang: en
---

# Exploiting a Leaked Thread Handle

## Summary

A bug in the Windows Secondary Logon service, fixed as MS16-032, leaks a fully accessible thread handle from a privileged process, enabling privilege escalation without memory corruption.

## Intelligence Metadata

- **Sources:** projectzero.google
- **Published:** 2016-03-21T00:00:00Z
- **Original:** https://projectzero.google/2016/03/exploiting-leaked-thread-handle.html
- **Phying News:** https://phying.com/item/8738