CVEvulnerability

CVE-2016-0151

7.8 HIGH Known exploited Published 2016-04-12 Modified 2026-06-17 Official page ↗

CISA Known Exploited Vulnerability

Microsoft Windows CSRSS Security Feature Bypass Vulnerability — Microsoft Client-Server Run-time Subsystem (CSRSS)

The Client-Server Run-time Subsystem (CSRSS) in Microsoft mismanages process tokens, which allows local users to gain privileges via a crafted application.

Added to KEV
2022-03-28
Remediation due
2022-04-18
Ransomware use
Known
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2016-0151
Status
Analyzed
Published
2016-04-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-269

Description

The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mismanages process tokens, which allows local users to gain privileges via a crafted application, aka "Windows CSRSS Security Feature Bypass Vulnerability."

Affected configurations

• microsoft windows 10 1507 • microsoft windows 10 1511 • microsoft windows 8.1 • microsoft windows rt 8.1 • microsoft windows server 2012 • microsoft windows server 2012 r2

Related

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References