CVE-2016-0151: Microsoft Windows CSRSS Security Feature Bypass Vulnerability
The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mismanages process tokens, which allows local users to gain privileges via a crafted application, aka "Windows CSRSS Security Feature Bypass Vulnerability."
Other sources
The Client-Server Run-time Subsystem (CSRSS) in Microsoft mismanages process tokens, which allows local users to gain privileges via a crafted application.
— CISA
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-0151?
CVE-2016-0151 is rated as important, indicating potential for privilege escalation.
How do I fix CVE-2016-0151?
To fix CVE-2016-0151, apply the latest security updates provided by Microsoft for affected operating systems.
Which systems are affected by CVE-2016-0151?
CVE-2016-0151 affects Microsoft Windows 8.1, Windows 10 versions 1507 and 1511, Windows Server 2012, and Windows RT 8.1.
What types of attacks can exploit CVE-2016-0151?
CVE-2016-0151 can be exploited by local users to gain elevated privileges via a specially crafted application.
Is there a workaround for CVE-2016-0151?
While the main resolution is to apply patches, temporarily restricting user permissions can serve as a workaround for CVE-2016-0151.