CVE-2016-0040

A local privilege escalation vulnerability in the Windows kernel allowed attackers to gain elevated access without remote code execution.

This CVE-2016-0040 flaw enabled local users to escalate privileges via a crafted application, posing a significant risk to systems lacking timely patches. DIB organizations must ensure all Windows endpoints are patched to prevent unauthorized access and maintain compliance with NIST 800-171 requirements. The vulnerability was actively exploited in the wild, highlighting the critical need for regular patch management.

Shame score — A known kernel vulnerability that was actively exploited in the wild, indicating a failure to patch a critical flaw before it was weaponized.