What’s Vulnerable › Vulnerabilities

CVE-2016-0151: Microsoft Windows CSRSS Security Feature Bypass Vulnerability

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: yes — in CISA KEV since 2022-03-28
• EPSS: 62.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2016-04-12 · updated 2026-06-17
• Weakness: CWE-269

Description

The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mismanages process tokens, which allows local users to gain privileges via a crafted application, aka "Windows CSRSS Security Feature Bypass Vulnerability."

Affected products

• Microsoft Windows 10 Version 1507: all versions
• Microsoft Windows 10 1511: all versions
• Microsoft Windows 8.1: all versions
• Microsoft Windows RT 8.1: all versions
• Microsoft Windows Server 2012: r2

References

• http://www.securitytracker.com/id/1035544
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-048
• https://www.exploit-db.com/exploits/39740/
• http://www.securitytracker.com/id/1035544
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-048
• https://www.exploit-db.com/exploits/39740/
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-0151

Get alerted when CVE-2016-0151 or the next vulnerability affects your stack