high7.8Known exploitedPublic exploit code
CVE-2016-0151
Microsoft Windows CSRSS Security Feature Bypass Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-03-28. Federal due date: 2022-04-18.
Apply updates per vendor instructions.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Windows - CSRSS BaseSrvCheckVDM Session 0 Process Creation Privilege Escalation (MS16-048)2016-04-27 · dos · windows · Verified
Impact
The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mismanages process tokens, which allows local users to gain privileges via a crafted application, aka "Windows CSRSS Security Feature Bypass Vulnerability."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows 10 1507 | All versions |
| Microsoft | Windows 10 1511 | All versions |
| Microsoft | Windows 8.1 | All versions |
| Microsoft | Windows Rt 8.1 | All versions |
| Microsoft | Windows Server 2012 | All versions Version r2 |
Weakness classification
References
- NVD record
- CVE.org record
- CISA KEV catalog
- http://www.securitytracker.com/id/1035544
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-048
- https://www.exploit-db.com/exploits/39740/
- http://www.securitytracker.com/id/1035544
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-048
- https://www.exploit-db.com/exploits/39740/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-0151