CVE-2016-7216

CVE Database · CVE-2016-7216

CVE-2016-7216

· N/AModified

CVSS v3.1

N/A

EPSS

4.14%

Published

Nov 10, 2016

Modified

May 6, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBMicrosoft Windows Kernel - Registry Hive Loading 'nt!RtlEqualSid' Out-of-Bounds Read (MS16-138)TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 mishandles permissions, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Elevation of Privilege Vulnerability."

Weaknesses (CWE)

CWE-200CWE-264

Affected Products (4)

microsoft · windows_7vulnerable

microsoft · windows_server_2008vulnerable

microsoft · windows_vistavulnerable

References (8)

http://www.securityfocus.com/bid/94048

http://www.securitytracker.com/id/1037253

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-139

https://www.exploit-db.com/exploits/40766/

http://www.securityfocus.com/bid/94048

http://www.securitytracker.com/id/1037253

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-139

https://www.exploit-db.com/exploits/40766/

KEV Catalog EPSS Scores Vendors All CVEs