CVE-2016-0041

high Microsoft
CVSS v3 Base Score
7.8
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
58.3%
Exploitation probability in 30 days
Top 2% most likely to be exploited
Attack Characteristics
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Confidentiality
High
Integrity
High
Availability
High
Published: February 10, 2016 (3747 days ago)
Last Modified: May 6, 2026
Vendor: Microsoft
Source: NVD

Description

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold and 1511, and Internet Explorer 10 and 11 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "DLL Loading Remote Code Execution Vulnerability."

CWE

NVD-CWE-Other

Affected Products

microsoft internet explorermicrosoft windows 10microsoft windows 7microsoft windows 8.1microsoft windows rt 8.1microsoft windows server 2008microsoft windows server 2012microsoft windows vista

References

🔗 seclists.org 🔗 www.securitytracker.com 🔗 www.securitytracker.com 🔗 docs.microsoft.com 🔗 docs.microsoft.com