Microsoft Windows Session Object Elevation Of Privilege Vulnerability (CVE-2016-3306)

Windows session object elevation of privilege vulnerability exist in the way that Windows handles session objects. A locally authenticated attacker who successfully exploited the vulnerability could hijack the session of another user.