Microsoft Windows Kernel Privilege Escalation Vulnerability

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Feb 10, 2016 · Catalog

   Detected

   The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted application, aka "Windows Elevation of Privilege Vulnerability."

2. Mar 28, 2022 · CISA KEV

   Known exploited

   Apply updates per vendor instructions.

3. Apr 18, 2022 · CISA KEV

   Remediation due

   Apply updates per vendor instructions.

4. Jun 16, 2026 · Catalog

   Updated

   The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted application, aka "Windows Elevation of Privilege Vulnerability."

Affected

• cpe microsoft/windows 7version unspecified
• cpe microsoft/windows server 2008version unspecified
• cpe microsoft/windows server 2008r2
• cpe microsoft/windows vistaversion unspecified
• vendor Microsoft Windowsversion unspecified

Sources

• CISA KEVConfirmed exploitationCVE-2016-0040

  The kernel in Microsoft Windows allows local users to gain privileges via a crafted application.

  cisa.gov
• CVE.orgVulnerability recordCVE-2016-0040

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2016-0040

  30-day exploitation probability 24.5%

  first.org
• Exploit DatabasePublic exploit reference44586

  Public archive entry. The exploit body is not stored here.

  exploit-db.com
• Metasploit ModulesPublic exploit moduleexploit_windows/local/ms16_014_wmi_recv_notif

  Public module reference (normal). Module source is not copied into this catalog.

  rapid7.com
• NIST NVDVulnerability recordCVE-2016-0040

  The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted application, aka "Windows Elevation of Privilege Vulnerability."

  nvd.nist.gov

References

• Broken Link · securitytracker.com
• Patch · docs.microsoft.com
• CISA note · nvd.nist.gov
• US Government Resource · cisa.gov
• Exploit · exploit-db.com