CVE-2016-0151
- State
- Published
- Severity
- 7.8 High
- Published
- Apr 12, 2016
- Updated
- Oct 21, 2025
- Reserved
- Dec 4, 2015
Description
The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mismanages process tokens, which allows local users to gain privileges via a crafted application, aka "Windows CSRSS Security Feature Bypass Vulnerability."
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.8 High | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | CISA-ADP |
Weaknesses
- CWE-269 Improper Privilege Management
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- MS16-048vendor-advisory
- 1035544vdb-entry
- 39740exploit
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-0151government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.