CVE-2016-0098
HighSummary
A vulnerability in Microsoft Windows allows remote attackers to execute arbitrary code via crafted media content. This affects multiple versions of Windows, including Windows 7, 8.1, and 10.
Risk Assessment
Attackers can exploit this vulnerability to gain control over the system, posing a serious threat to the security of organizational data and infrastructure.
Recommendation
It is recommended to update operating systems to the latest versions and apply relevant security patches provided by Microsoft.
Other vulnerabilities in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10
See all- CVE-2016-0101High
A vulnerability in Microsoft Windows allows remote attackers to execute arbitrary code via crafted media content. This affects several versions of the operating system, including Windows 7, 8.1, 10, and Windows Server.
- CVE-2015-0062High
A vulnerability in Microsoft Windows allows local users to gain elevated privileges by exploiting incorrect impersonation handling in a process that uses the SeAssignPrimaryTokenPrivilege privilege.
Original NVD description (English source)
Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 allow remote attackers to execute arbitrary code via crafted media content, aka "Windows Media Parsing Remote Code Execution Vulnerability."