CVE-2016-0041

Home/CVE/Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold an

CVE

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold an

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold and 1511, and Internet Explorer 10 and 11 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "DLL Loading Remote Code Execution Vulnerability.".

HIGH · CVSS 7.8 EPSS 0.58284

Act now

EPSS ≥ 0.50 - high probability of exploitation in the next 30 days
EPSS percentile: top 2% of all CVEs by exploitation likelihood
Public exploit or PoC is available
CVSS base score ≥ 7.0

Sigma rules2 YARA rules0

▤

Affected Products & Versions

microsoft internet explorerall versions
microsoft windows 10all versions
microsoft windows 7all versions
microsoft windows 8.1all versions
microsoft windows rt 8.1all versions
microsoft windows server 2008all versions
microsoft windows server 2012all versions
microsoft windows vistaall versions

⚠

Public Exploits & PoCs

localMicrosoft Office - OLE Multiple DLL Side Loading Vulnerabilities (MS15-132/MS16-014/MS16-025/MS16-041/MS16-070) (Metasploit)verified

◈

Sigma Hunt Rules

Exact rules name this CVE ID. Product rules name an affected product in their title. Related rules cover techniques used by actors who exploited this CVE. Showing the most relevant matches; the complete related set is on the full drill-down.

productmediumInternet Explorer DisableFirstRunCustomize Enabled

productmediumInternet Explorer Autorun Keys Modification

▣