CVE-2016-0118 — Improper Input Validation in Microsoft Windows 10

CWE-20 — Improper Input Validation5 documents4 sources
Severity
7.8HIGHNVD
EPSS
47.2%
top 2.31%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Windows 10
Timeline
PublishedMar 9
Latest updateMay 14

Description

The PDF library in Microsoft Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted PDF document, aka "Windows Remote Code Execution Vulnerability."

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages1 packages

🔴Vulnerability Details

1
GHSA
GHSA-x8q3-9425-q46q: The PDF library in Microsoft Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted PDF document, aka "Windows Remot↗2022-05-14
▶

🕵️Threat Intelligence

2
Talos
Microsoft Patch Tuesday - March 2016↗2016-03-08
▶
Talos
Microsoft Patch Tuesday - March 2016↗2016-03-08
▶

💬Community

1
Bugzilla
CVE-2016-2376 pidgin: MXIT read stage 0x3 Code Execution Vulnerability↗2016-06-22
▶