Live › vulnerability › CVE-2016-0151
Go to dashboardMicrosoft Windows CSRSS mismanages process tokens, letting a local user gain elevated privileges by running a crafted application. Exploitation is confirmed in the wild and CISA's KEV lists it with ransomware use.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Microsoft Client-Server Run-time Subsystem (CSRSS) | vendor | – | – |
Unknown from the sources.
Apply the Microsoft Windows updates per vendor instructions (CISA KEV required action); the specific KB or patched build is not stated in the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mismanages process tokens, which allows local users to gain privileges via a crafted application, aka "Windows CSRSS Security Feature Bypass Vulnerability."
This page as .md · .json · in your agent: get_signal("CVE-2016-0151")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.