CVE-2016-0041

HIGH

Microsoft Internet Explorer - Remote Code Execution

Title source: rule

Description

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold and 1511, and Internet Explorer 10 and 11 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "DLL Loading Remote Code Execution Vulnerability."

Exploits (1)

exploitdb WORKING POC
rubylocalwindows
https://www.exploit-db.com/exploits/41706

References (6)

Scores

CVSS v3 7.8
EPSS 0.5828
EPSS Percentile 98.2%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (12)
microsoft/internet_explorer 10
microsoft/internet_explorer 11
microsoft/windows_10
microsoft/windows_10 1511
microsoft/windows_7
microsoft/windows_8.1
microsoft/windows_rt_8.1
microsoft/windows_server_2008
microsoft/windows_server_2008 r2 sp1
microsoft/windows_server_2012
... and 2 more
Published Feb 10, 2016
Tracked Since Feb 18, 2026