CVE-2016-0018

HIGH

Microsoft Windows 7 SP1 to 10 (1511) Privilege Escalation via DLL Loading

Title source: llm

Description

Microsoft Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 R2, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "DLL Loading Remote Code Execution Vulnerability."

References (2)

Core 2

Core References

Patch, Vendor Advisory vendor-advisory x_refsource_ms

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-007

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1034661

Scores

CVSS v3 7.3

EPSS 0.1353

EPSS Percentile 96.0%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-426

Status published

Products (6)

microsoft/windows_10

microsoft/windows_10 1511

microsoft/windows_7

microsoft/windows_8

microsoft/windows_8.1

microsoft/windows_server_2012 r2

Published Jan 13, 2016

Tracked Since Feb 18, 2026