Microsoft Windows RPC Downgrade Vulnerability (CVE-2016-0128)

An elevation of privilege vulnerability exists in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) remote protocols when they accept authentication levels that do not protect the RPC channel adequately. An attacker who successfully exploited this vulnerability could gain access to the SAM database.