7.8

CVE-2016-0165: Microsoft Win32k Privilege Escalation Vulnerability

KEV
Analyzed
Published 12-04-2016Last modified 21-10-2025

Vulnerability summary

CVE-2016-0165 is a high (CVSS 7.8) vulnerability in Microsoft Win32k. It is known to be exploited: CISA lists it, first on 22-06-2023. EPSS estimates a 13.73% chance of exploitation in the next 30 days, higher than 96.5% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
85/100
0100
Critical · default modelHow is this calculated?
CVSS score
7.8/10
010
High · v3.1 (CVE.org)
EPSS score
13.73%
0%100%
Medium · 0.00 pp in 30 days
KEVExploited in the wildCritical · listed in 1 catalog
RansomwareNot flaggedNo ransomware use recorded.
Public exploits1exploit-database

Timeline

  1. 12-04-2016
    PublishedVulnerability first disclosed.
  2. 22-06-2023
    Added to CISA KEVExploitedMicrosoft Win32k Privilege Escalation Vulnerability
  3. 13-07-2023
    CISA remediation dueDeadline passedApply updates per vendor instructions.
  4. 21-10-2025
    Last modifiedVulnerability information updated.

Description

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0143 and CVE-2016-0167.

CVSS metrics

3 scores · 2 sources · 2 versions

EPSS trend

Probability

13.73%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

No change 0.00 pp

From 13.73% on 22-09-2026

22-09-202622-10-2026

Known exploited

Compare KEV catalogs
CISA KEVListed
Added
22-06-2023
Federal due date
13-07-2023
ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

CISA required action

Apply updates per vendor instructions. learn.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-039 nvd.nist.gov/vuln/detail/CVE-2016-0165

Public exploits

1 found
  • exploit-databaselocalwindows_x86Unverified

    Microsoft Windows Kernel (7 x86) - Local Privilege Escalation (MS16-039)

    Maturity: poc

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Microsoft6 products

1 vendor · 6 products

References

5 links