CVE-2016-0167

Microsoft Win32k Privilege Escalation Vulnerability

Published Apr 12, 2016 · updated Jun 16, 2026 · microsoft windows 10 1507

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0143 and CVE-2016-0165.

Timeline

Detection, updates, and resolution for this record.

Apr 12, 2016 · Catalog
Detected
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0143 and CVE-2016-0165.
Nov 3, 2021 · CISA KEV
Known exploited
Apply updates per vendor instructions.
May 3, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0143 and CVE-2016-0165.

Required action

Apply updates per vendor instructions.

CISA due date May 3, 2022

Affected

cpe microsoft/windows 10 1507version unspecified
cpe microsoft/windows 10 1511version unspecified
cpe microsoft/windows 7version unspecified
cpe microsoft/windows 8.1version unspecified
cpe microsoft/windows rt 8.1version unspecified
cpe microsoft/windows server 2008version unspecified
cpe microsoft/windows server 2008r2
cpe microsoft/windows server 2012version unspecified
vendor Microsoft Win32kversion unspecified

Sources

CISA KEVCVE-2016-0167
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation via a crafted application
cisa.gov
CVE.orgCVE-2016-0167
Official CVE identifier
cve.org
FIRST EPSSCVE-2016-0167
30-day exploitation probability 5.7%
first.org
NIST NVDCVE-2016-0167
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevat
nvd.nist.gov