CVE-2016-7255

CVE Database · CVE-2016-7255

CVE-2016-7255

· HIGHAnalyzed

CVSS v3.1

7.8

EPSS

80.97%

Published

Nov 10, 2016

Modified

Apr 22, 2026

CISA Known Exploited Vulnerability

Added: 2021-11-03 · Due: 2022-05-03

Apply updates per vendor instructions.

Public PoC / Exploit (9)

All weaponized →

Exploit-DBMicrosoft Windows Kernel - 'win32k' Denial of Service (MS16-135)Exploit-DBMicrosoft Windows Kernel - 'win32k.sys NtSetWindowLongPtr' Local Privilege Escalation (MS16-135) (1)Exploit-DBMicrosoft Windows Kernel - 'win32k.sys NtSetWindowLongPtr' Local Privilege Escalation (MS16-135) (2)TrickestTrickest PoC index GitHub PoCFSecureLABS/CVE-2016-7255★81 GitHub PoCyuvatia/page-table-exploitation★11 GitHub PoCheh3/CVE-2016-7255★3 GitHub PoCbbolmin/cve-2016-7255_x86_x64★1 GitHub PoChomjxi0e/CVE-2016-7255★0

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products (12)

microsoft · windows_10_1507vulnerable

microsoft · windows_10_1511vulnerable

microsoft · windows_10_1607vulnerable

microsoft · windows_7vulnerable

microsoft · windows_8.1vulnerable

microsoft · windows_rt_8.1vulnerable

microsoft · windows_server_2008vulnerable

microsoft · windows_server_2012vulnerable

References (20)