CVE-2016-0179 in the critical feed json
Windows Shell in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to exe…
published 2016-05-11 10 y ago modified 2026-06-17 4 mo ago also EUVD-2016-0217
- cvss
- 7.8
- version 3.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 24.2%
- EPSS 24.2% chance of exploitation in 30 days, percentile 97%
- public exploits
- 0
- none known
Summary
Windows Shell in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Shell Remote Code Execution Vulnerability."
Exploit prediction
24.19% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.0 | 7.8 | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Classification
- Weakness
-
- CWE-284 Improper Access Control
References
-
docs.microsoft.com
/en-us/security-updates/securitybulletins/2016/ms16-057
vendor-advisory
-
securityfocus.com
/bid/89868
vdb-entry
-
securitytracker.com
/id/1035825
vdb-entry
Sources
- CVE List CVE-2016-0179
- NVD CVE-2016-0179
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.