CVE-2016-0018

High

Published: 13/01/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The vulnerability in Microsoft Windows 7 SP1, 8, 8.1, Windows Server 2012 R2, and Windows 10 Gold and 1511 is related to improper DLL loading. This allows local users to gain elevated privileges via a crafted application.

Risk Assessment

Organizations may be exposed to unauthorized access to systems, potentially leading to serious security breaches and data loss.

Recommendation

It is recommended to update operating systems to the latest versions and implement appropriate security measures to minimize the risk of exploitation of this vulnerability.

Other vulnerabilities in Microsoft Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 R2, Windows 10 Gold, Windows 10 1511

CVE-2015-0079High
The RDP implementation in Microsoft Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to cause a denial of service by establishing many RDP sessions that do not properly free allocated memory.

Original NVD description (English source)

Microsoft Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 R2, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "DLL Loading Remote Code Execution Vulnerability."