What is the CVSS score of CVE-2016-7255?

CVE-2016-7255 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 89.4%.

Which versions of Windows 10 1507 are affected by CVE-2016-7255?

CVE-2016-7255 presents notable security risk rated CVSS 7.8. Exploitation could compromise the security of affected deployments.. A patch is available.

Is there a public PoC exploit available for CVE-2016-7255?

Yes, a public proof-of-concept exploit is available for CVE-2016-7255. Prioritise patching immediately. EPSS: 89.4%.

How to fix or mitigate CVE-2016-7255?

Within 24 hours: Identify all affected systems and apply vendor patches immediately. Vendor patch is available.

Windows 10 1507 CVE-2016-7255

HIGH

2016-11-10 secure@microsoft.com

Information Disclosure Microsoft Windows 10 1507 Windows 10 1607 Windows Server 2008 Windows Server 2012 Windows Server 2016 Windows 7 Windows 8 1 Windows Rt 8 1 Windows Vista Windows 10 1511

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Re-analysis Queued

Apr 21, 2026 - 15:22 vuln.today

cvss_changed

Analysis Generated

Mar 26, 2026 - 11:18 vuln.today

Added to CISA KEV

Oct 22, 2025 - 00:15 cisa

CISA KEV

PoC Detected

Oct 22, 2025 - 00:15 vuln.today

Public exploit code

Patch released

Oct 22, 2025 - 00:15 nvd

Patch available

CVE Published

Nov 10, 2016 - 07:00 nvd

HIGH 7.8

DescriptionNVD

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."

AnalysisAI

The Win32k kernel-mode driver in Windows Vista through Windows Server 2016 allows local privilege escalation, exploited alongside CVE-2016-7256 in targeted attacks attributed to the Strontium (APT28/Fancy Bear) group.

Technical ContextAI

The win32k.sys vulnerability allows local code execution in kernel mode through crafted application interaction with the Window Manager subsystem. The exploit was part of a multi-vulnerability attack chain used by Russian state-sponsored actors.

RemediationAI

Apply Microsoft security update MS16-135. Enable kernel exploit mitigations. Monitor for APT28/Sofacy indicators of compromise.

More in Windows 10 1507

View all

CVE-2021-40444 HIGH Act Now POC

8.8 Sep 15

Windows MSHTML component contains a remote code execution vulnerability that allows attackers to craft malicious ActiveX

CVE-2021-34527 HIGH Act Now POC

8.8 Jul 02

<p>A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged fi

CVE-2022-30190 HIGH Act Now POC

7.8 Jun 01

Windows MSDT (Microsoft Support Diagnostic Tool) allows remote code execution when called via the ms-msdt URL protocol f

CVE-2017-0147 HIGH Act Now POC

7.5 Mar 17

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

CVE-2021-1675 HIGH Act Now POC

7.8 Jun 08

Windows Print Spooler Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no auth

CVE-2023-36884 HIGH Act Now POC

7.5 Jul 11

Windows Search Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely explo

CVE-2024-30088 HIGH Act Now POC

7.0 Jun 11

Windows Kernel contains a TOCTOU race condition vulnerability allowing local privilege escalation, exploited by the OilR

CVE-2019-1458 HIGH Act Now POC

7.8 Dec 10

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

CVE-2018-8453 HIGH Act Now POC

7.8 Oct 10

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

CVE-2025-33053 HIGH Act Now POC

8.8 Jun 10

Windows Internet Shortcut Files (.url) contain an external control vulnerability (CVE-2025-33053, CVSS 8.8) that enables

CVE-2020-1054 HIGH Act Now POC

7.0 May 21

Elevation of privilege in the Windows Win32k kernel-mode driver allows a local, low-privileged attacker to escalate to S

CVE-2025-33073 HIGH Act Now POC

8.8 Jun 10

Windows SMB contains an improper access control vulnerability (CVE-2025-33073, CVSS 8.8) enabling authenticated attacker

Same technique Information Disclosure

View all

CVE-2019-2725 CRITICAL POC

9.8

CVE-2021-34523 CRITICAL POC

9.0

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2016-7255 vulnerability details – vuln.today

Back

Windows 10 1507 CVE-2016-7255

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

RemediationAI

More in Windows 10 1507

Same technique Information Disclosure

Share

External POC / Exploit Code