High severity7.8NVD Advisory· Published Jan 13, 2016· Updated May 6, 2026
CVE-2016-0007
CVE-2016-0007
Description
The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandles reparse points, which allows local users to gain privileges via a crafted application, aka "Windows Mount Point Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0006.
Affected products
13cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*+ 2 more
- cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*
- cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
- cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-008nvdPatchVendor Advisory
- code.google.com/p/google-security-research/issues/detailnvdExploitMailing ListThird Party Advisory
- www.exploit-db.com/exploits/39310/nvdExploitThird Party AdvisoryVDB Entry
- www.exploit-db.com/exploits/39311/nvdExploitThird Party AdvisoryVDB Entry
- www.securityfocus.com/bid/79898nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1034645nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.