The WebDAV client in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold…

1. 2016-02-09 First public exploit (Metasploit exploit/windows/local/ms16_016_webdav)
2. 2016-02-10 Published

22.84% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-09).

• Metasploit exploit/windows/local/ms16_016_webdav MS16-016 mrxdav.sys WebDav Local Privilege Escalation metasploit exploit, excellent rank, 2016-02-09
• EDB-40085 Microsoft Windows 7 SP1 - 'mrxdav.sys' WebDAV Privilege Escalation (MS16-016) (Metasploit) local, 2016-07-11
• EDB-39788 Microsoft Windows 7 - 'WebDAV' Local Privilege Escalation (MS16-016) (2) local, 2016-05-09
• EDB-39432 Microsoft Windows 7 SP1 (x86) - 'WebDAV' Local Privilege Escalation (MS16-016) (1) local, 2016-02-10

Weakness

• CWE-264 Permissions, Privileges, and Access Controls

• exploit-db.com /exploits/40085/

  exploit

• exploit-db.com /exploits/39788/

  exploit

• exploit-db.com /exploits/39432/

  exploit

• docs.microsoft.com /en-us/security-updates/securitybulletins/2016/ms16-016

  vendor-advisory

• securitytracker.com /id/1034980

  vdb-entry

• CVE List CVE-2016-0051
• NVD CVE-2016-0051

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.