High severity7.8NVD Advisory· Published Feb 10, 2016· Updated Jun 17, 2026
CVE-2016-0041
CVE-2016-0041
Description
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold and 1511, and Internet Explorer 10 and 11 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "DLL Loading Remote Code Execution Vulnerability."
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
14cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*
- (no CPE)range: 10, 11
cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
6- seclists.org/fulldisclosure/2016/Feb/49nvd
- www.securitytracker.com/id/1034971nvd
- www.securitytracker.com/id/1034985nvd
- docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-009nvd
- docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-014nvd
- www.securify.nl/advisory/SFY20150905/nps_datastore_server_dll_side_loading_vulnerability.htmlnvd
News mentions
0No linked articles in our index yet.