{
    "id": "CVE-2016-0151",
    "published": "2016-04-12 23:59:15",
    "last_modified": "2026-06-17 00:37:00",
    "cvss_score": "7.8",
    "cvss_severity": "HIGH",
    "cvss_version": "3.1",
    "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
    "cwe": "CWE-269",
    "description": "The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mismanages process tokens, which allows local users to gain privileges via a crafted application, aka \"Windows CSRSS Security Feature Bypass Vulnerability.\"",
    "epss_score": "0.62943",
    "epss_percentile": "0.99175",
    "kev": 1,
    "kev_due": "2022-04-18",
    "has_exploit": 1,
    "updated_at": "2026-09-26 18:20:22",
    "priority": {
        "rank": 1,
        "label": "Patch first",
        "why": "On CISA KEV — known exploited in the wild, due 2022-04-18."
    },
    "products": [
        {
            "vendor": "microsoft",
            "product": "windows_10_1507"
        },
        {
            "vendor": "microsoft",
            "product": "windows_10_1511"
        },
        {
            "vendor": "microsoft",
            "product": "windows_8.1"
        },
        {
            "vendor": "microsoft",
            "product": "windows_rt_8.1"
        },
        {
            "vendor": "microsoft",
            "product": "windows_server_2012"
        }
    ],
    "kev_detail": {
        "cve_id": "CVE-2016-0151",
        "date_added": "2022-03-28",
        "due_date": "2022-04-18",
        "vendor": "Microsoft",
        "product": "Client-Server Run-time Subsystem (CSRSS)",
        "name": "Microsoft Windows CSRSS Security Feature Bypass Vulnerability",
        "ransomware": 1
    },
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "39740",
            "title": "Microsoft Windows - CSRSS BaseSrvCheckVDM Session 0 Process Creation Privilege Escalation (MS16-048)",
            "date": "2016-04-27",
            "url": "https://www.exploit-db.com/exploits/39740"
        }
    ],
    "refs_list": [
        "http://www.securitytracker.com/id/1035544",
        "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-048",
        "https://www.exploit-db.com/exploits/39740/",
        "http://www.securitytracker.com/id/1035544",
        "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-048",
        "https://www.exploit-db.com/exploits/39740/",
        "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-0151"
    ]
}