Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

Windows and Internet Explorer let local users gain admin rights

CVE-2016-0041 · published 10 years ago
Summary

Several versions of Windows and Internet Explorer can load code incorrectly, letting someone with access to the computer run programs with higher privileges. This could let a regular user take control of system functions. Apply the latest security updates from Microsoft to fix the issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
microsoft internet_explorer 10
11
cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*
microsoft windows_10 1511
cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*
microsoft windows_7 All versions
cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*
microsoft windows_8.1 All versions
cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*
microsoft windows_rt_8.1 All versions
cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*
microsoft windows_server_2008 r2
cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*
microsoft windows_server_2012 r2
cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*
microsoft windows_vista All versions
cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*
Original advisory text
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold and 1511, and Internet Explorer 10 and ...
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold and 1511, and Internet Explorer 10 and 11 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "DLL Loading Remote Code Execution Vulnerability."
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
7.8 High
Exploitation
83% chance of attack within 30 days
Timeline
Published10 Feb 2016
Updated29 Sep 2026
First seen29 Sep 2026
Sources
CVE-2016-0041 · NVD
Track software like this
Free during beta