⚠ Actively exploited
Added to CISA KEV on 2023-06-22. Federal agencies required to patch by 2023-07-13. Required action: Apply updates per vendor instructions..

CVE-2016-0165 — Microsoft Windows 10 vulnerability

CWE-26417 documents9 sources
Severity
7.8HIGHNVD
EPSS
6.2%
top 9.12%
CISA KEV
KEV
Added 2023-06-22
Due 2023-07-13
Exploit
Exploited in wild
Active exploitation observed
Affected products
15
Microsoft Windows 10Microsoft Windows Server 2008Microsoft Windows Server 2012+12 more
Timeline
PublishedApr 12
KEV addedJun 22
KEV dueJul 13
CISA Required Action: Apply updates per vendor instructions.

Description

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0143 and CVE-2016-0167.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages14 packages

Patches

Patch: docs.microsoft.com ↗Patch: docs.microsoft.com ↗

🔴Vulnerability Details

4
GHSA
GHSA-3936-9446-hfx7: The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8↗2022-05-14
▶
GHSA
GHSA-62mp-wgh2-4h5x: The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8↗2022-05-14
▶
GHSA
GHSA-3xwc-546j-255h: The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8↗2022-05-14
▶
VulnCheck
Microsoft Win32k Privilege Escalation Vulnerability↗2016
▶

💥Exploits & PoCs

1
Exploit-DB
Microsoft Windows Kernel (7 x86) - Local Privilege Escalation (MS16-039)↗2018-03-01
▶

📋Vendor Advisories

2
CISA
Microsoft Win32k Privilege Escalation Vulnerability↗2023-06-22
▶
Microsoft
Windows Graphics Component Elevation of Privilege Vulnerability↗2016-04-12
▶

🕵️Threat Intelligence

7
Securelist
Kaspersky Security Bulletin 2016. Review of the year. Overall statistics for 2016↗2016-12-14
▶
Securelist
Kaspersky Security Bulletin 2016. Review of the year. Overall statistics for 2016↗2016-12-14
▶
Securelist
Windows zero-day exploit used in targeted attacks by FruityArmor APT↗2016-10-20
▶
Securelist
Windows zero-day exploit used in targeted attacks by FruityArmor APT↗2016-10-20
▶
Qualys
Patch Tuesday April 2016 | Qualys↗2016-04-12
▶