CVE-2016-0075

MEDIUM

Microsoft Windows 8.1/10, Server 2012, RT 8.1 - Local Privilege Escalation via Registry API

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2016-0075. PoCs published by Google Security Research.

AI-analyzed exploit summary The provided C# code is a functional proof-of-concept exploit for CVE-2016-0075, which leverages the DeviceApi CMApi PiCMOpenClassKey IOCTL to create arbitrary registry keys in the system hive, leading to elevation of privilege (EoP) on Windows 10 10586.

Description

The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitive information in the registry, aka "Windows Kernel Local Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0073.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Google Security Research · localwindows

https://www.exploit-db.com/exploits/40573

View Code ZIP pw:eip

The provided C# code is a functional proof-of-concept exploit for CVE-2016-0075, which leverages the DeviceApi CMApi PiCMOpenClassKey IOCTL to create arbitrary registry keys in the system hive, leading to elevation of privilege (EoP) on Windows 10 10586.

Classification

Working Poc 95%

Attack Type

Lpe

Complexity

Moderate

Reliability

Reliable

Target: Windows 10 10586 (not tested on 8.1 Update 2 or Windows 7)

Auth required

Prerequisites: Normal user access · Ability to compile and execute C# code · Target system running Windows 10 10586

MITRE ATT&CK

T1112 - Modify Registry T1068 - Exploitation for Privilege Escalation

devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/93356

Vendor Advisory vendor-advisory x_refsource_ms

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-124

Exploit, Third Party Advisory exploit x_refsource_exploit-db

https://www.exploit-db.com/exploits/40573/

Scores

CVSS v3 5.5

EPSS 0.0688

EPSS Percentile 93.2%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Details

CWE

CWE-200

Status published

Products (7)

microsoft/windows_10

microsoft/windows_10 1511

microsoft/windows_10 1607

microsoft/windows_8.1

microsoft/windows_rt_8.1

microsoft/windows_server_2012

microsoft/windows_server_2012 r2

Published Oct 14, 2016

Tracked Since Feb 18, 2026