CveMateVulnerability intelligence

CVE-2016-7255: Microsoft Win32k Privilege Escalation Vulnerability

CVSS: 7.8v3.1HighKEVRansomwareAnalyzed

Published 10-11-2016Last modified 10-09-2026

Vulnerability summary

CVE-2016-7255 is a high (CVSS 7.8) vulnerability in Microsoft Win32k. It is known to be exploited: CISA lists it, first on 03-11-2021. It has been used in ransomware campaigns. EPSS estimates a 80.97% chance of exploitation in the next 30 days, higher than 99.6% of scored vulnerabilities. 5 public exploits are recorded.

Overall risk

90/100

0100

Critical · default modelHow is this calculated?

CVSS score

7.8/10

010

High · v3.1 (CVE.org)

EPSS score

80.97%

0%100%

Critical · 0.00 pp in 30 days

KEVListedCISA

RansomwareKnown useFlagged by CISA

Public exploits5github, reference, exploit-database

Timeline

10-11-2016
PublishedVulnerability first disclosed.
03-11-2021
Added to CISA KEVMicrosoft Win32k Privilege Escalation Vulnerability
03-05-2022
CISA remediation dueApply updates per vendor instructions.
10-09-2026
Last modifiedVulnerability information updated.

Description

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."

CVSS metrics

3 scores · 2 sources · 2 versions

v3.17.8v2.07.2

EPSS trend

Probability

80.97%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

0.00 pp

From 80.97% on 19-09-2026

19-09-202619-10-2026

EPSS score

80.97%

Known exploited

Compare KEV catalogs

CISA KEVListed

Added: 03-11-2021
Federal due date: 03-05-2022

CISA required action

Apply updates per vendor instructions. nvd.nist.gov/vuln/detail/CVE-2016-7255

Public exploits

5 found

githubUnverified
Cve 2016 7255
Maturity: poc
referenceUnverified
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
exploit-databasedoswindowsUnverified
Microsoft Windows Kernel - 'win32k' Denial of Service (MS16-135)
Maturity: poc

Show all 5 exploits

exploit-databaselocalwindowsUnverified
Microsoft Windows Kernel - 'win32k.sys NtSetWindowLongPtr' Local Privilege Escalation (MS16-135) (1)
Maturity: poc
exploit-databaselocalwindowsUnverified
Microsoft Windows Kernel - 'win32k.sys NtSetWindowLongPtr' Local Privilege Escalation (MS16-135) (2)
Maturity: poc

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Microsoft10 products

Show all 10

1 vendor · 10 products

References

12 links

packetstormsecurity.com/files/…X Refsource MISCExploitThird Party AdvisoryVDB Entry
github.com/mwrlabs/CVE-2016-7255X Refsource MISCExploitThird Party Advisory
www.exploit-db.com/exploits/40823/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
www.exploit-db.com/exploits/41015/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
securingtomorrow.mcafee.com/mcafee-labs/…X Refsource MISCBroken Link
www.exploit-db.com/exploits/40745/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1037251VDB EntryX Refsource SECTRACKBroken LinkThird Party Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-135Vendor AdvisoryX Refsource MSPatch
blog.trendmicro.com/trendlabs-security-intelligence/…X Refsource MISCBroken Link
www.securityfocus.com/bid/94064VDB EntryX Refsource BIDBroken LinkThird Party Advisory

Show all 12 references

security.googleblog.com/2016/10/disclosing-vulnerabilities-to-protect.htmlX Refsource MISCThird Party Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-7255Government ResourceUS Government Resource