# CVE-2016-0151

The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mismanages process tokens, which allows local users to gain privileges via a crafted application, aka "Windows CSRSS Security Feature Bypass Vulnerability."

- Page: https://www.vulneraibility.com/cve/CVE-2016-0151
- CVSS: 7.8
- Known exploited: yes, in CISA KEV since 2022-03-28; CISA due date 2022-04-18; known ransomware use
- EPSS: 62.82% (percentile 99.2)
- Public exploit code: 1 on Exploit-DB (first 2016-04-27)
- CISA SSVC: exploitation active, automatable no, technical impact total (assessed 2025-02-10)
- Weakness: CWE-269
- Published: 2016-04-12

## Affected

- microsoft:windows_10_1507
- microsoft:windows_10_1511
- microsoft:windows_8.1
- microsoft:windows_rt_8.1
- microsoft:windows_server_2012

## References

- [advisory] https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-048
- [other] http://www.securitytracker.com/id/1035544
- [exploit] https://www.exploit-db.com/exploits/39740/
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-0151

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.