CVE-2016-0041

HIGH

Microsoft Internet Explorer - Remote Code Execution

Title source: rule

Description

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold and 1511, and Internet Explorer 10 and 11 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "DLL Loading Remote Code Execution Vulnerability."

Exploits (1)

exploitdb WORKING POC

rubylocalwindows

https://www.exploit-db.com/exploits/41706

View on exploitdb

References (6)

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1034971

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1034985

[Vendor Advisory] https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-009

[Vendor Advisory] https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-014

[Vendor Advisory] https://www.securify.nl/advisory/SFY20150905/nps_datastore_server_dll_side_loading_vulnerability.html

[Mailing List] http://seclists.org/fulldisclosure/2016/Feb/49

Scores

CVSS v3 7.8

EPSS 0.6044

EPSS Percentile 98.2%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

Status draft

Affected Products (12)

microsoft/internet_explorer

microsoft/internet_explorer

microsoft/windows_10

microsoft/windows_10

microsoft/windows_7

microsoft/windows_8.1

microsoft/windows_rt_8.1

microsoft/windows_server_2008

microsoft/windows_server_2008

microsoft/windows_server_2012

microsoft/windows_server_2012

microsoft/windows_vista

Timeline

Published Feb 10, 2016

Tracked Since Feb 18, 2026