{
  "id": "CVE-2016-0151",
  "url": "https://spydr.io/cve/CVE-2016-0151",
  "published": "2016-04-12T23:59:15.890Z",
  "modified": "2026-06-17T00:37:00.880Z",
  "score": 7.8,
  "severity": "high",
  "cvss_version": "3.1",
  "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
  "score_source": "NVD",
  "epss": 0.62943,
  "epss_percentile": 0.99181,
  "exploited": true,
  "kev": {
    "added": "2022-03-28",
    "due": "2022-04-18",
    "action": "Apply updates per vendor instructions.",
    "ransomware": "Known",
    "name": "Microsoft Windows CSRSS Security Feature Bypass Vulnerability",
    "notes": "https://nvd.nist.gov/vuln/detail/CVE-2016-0151"
  },
  "ssvc_exploitation": "active",
  "vendors": [
    "microsoft"
  ],
  "products": [
    "microsoft windows 10 1507",
    "microsoft windows 10 1511",
    "microsoft windows 8.1",
    "microsoft windows rt 8.1",
    "microsoft windows server 2012"
  ],
  "cwes": [
    "CWE-269"
  ],
  "description": "The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mismanages process tokens, which allows local users to gain privileges via a crafted application, aka \"Windows CSRSS Security Feature Bypass Vulnerability.\"",
  "status": "Analyzed",
  "score_type": "Primary",
  "scores": {
    "cvss_v40": null,
    "cvss_v31": 7.8,
    "cvss_v30": null
  },
  "references": [
    {
      "url": "http://www.securitytracker.com/id/1035544",
      "tags": [
        "Broken Link",
        "Third Party Advisory",
        "VDB Entry"
      ]
    },
    {
      "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-048",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ]
    },
    {
      "url": "https://www.exploit-db.com/exploits/39740/",
      "tags": [
        "Exploit",
        "Third Party Advisory",
        "VDB Entry"
      ]
    },
    {
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-0151",
      "tags": [
        "US Government Resource"
      ]
    }
  ],
  "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0151",
  "covered_in": [],
  "attribution": [
    {
      "source": "NVD",
      "url": "https://nvd.nist.gov",
      "notice": "This product uses data from the NVD API but is not endorsed or certified by the NVD."
    },
    {
      "source": "CISA KEV",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "notice": "Known exploited vulnerabilities from the CISA KEV catalog."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss",
      "notice": "Exploit prediction scores from FIRST EPSS."
    }
  ]
}