What is the CVSS score of CVE-2016-0051?

CVE-2016-0051 has a CVSS 3.0 base score of 7.8 (High). CVSS vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 65.1%.

Which versions of Microsoft are affected by CVE-2016-0051?

CVE-2016-0051 presents notable security risk rated CVSS 7.8. Exploitation could compromise the security of affected deployments.

Is there a public PoC exploit available for CVE-2016-0051?

Yes, a public proof-of-concept exploit is available for CVE-2016-0051. Prioritise patching immediately. EPSS: 65.1%.

How to fix or mitigate CVE-2016-0051?

Within 24 hours: Identify all affected systems and apply vendor patches immediately. Monitor vendor channels for patch availability.

Microsoft CVE-2016-0051

HIGH

Permissions, Privileges, and Access Controls (CWE-264)

2016-02-10 secure@microsoft.com

Privilege Escalation Microsoft

7.8

CVSS 3.0 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 26, 2026 - 11:18 vuln.today

PoC Detected

Apr 12, 2025 - 10:46 vuln.today

Public exploit code

CVE Published

Feb 10, 2016 - 11:59 nvd

HIGH 7.8

DescriptionCVE.org

The WebDAV client in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "WebDAV Elevation of Privilege Vulnerability."

AnalysisAI

Microsoft Windows WebDAV client in Vista through Windows 10 contains a local privilege escalation vulnerability. Local attackers can exploit a flaw in the WebDAV Mini-Redirector driver to elevate privileges from standard user to SYSTEM, enabling complete local system compromise.

Technical ContextAI

The WebDAV Mini-Redirector (mrxdav.sys) kernel driver contains a vulnerability that allows a local user to send crafted IOCTL requests or trigger specific WebDAV operations that corrupt kernel memory. Successful exploitation elevates the attacker's process to SYSTEM privileges, the highest privilege level on Windows systems.

RemediationAI

Apply the February 2016 Microsoft security update (MS16-016). If the WebDAV client feature is not required, disable the WebClient service. Implement application control policies to prevent unauthorized exploit execution.

CVE-2016-0051 vulnerability details – vuln.today

Back

Microsoft CVE-2016-0051

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

Share

External POC / Exploit Code