CVE-2016-0018
High · 7.3CVSS
7.3
EPSS
13.5%
Published
Jan 13, 2016
CISA due date
—
The record
Microsoft Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 R2, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "DLL Loading Remote Code Execution Vulnerability."
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-0307 Multiple local privilege escalation vulnerabilities in the Palo Alto Networks… CWE-426
- CVE-2026-81192 `OpenTelemetry.Resources.Host` NuGet package, which provides OpenTelemetry resource… CWE-426
- CVE-2026-80159 Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in… CWE-426
- CVE-2026-84226 OpenVPN version 2.5.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local… CWE-426
- CVE-2026-82862 Hulumi versions before v1.3.2 resolve the threat-model helper script from an unsafe root… CWE-426
- CVE-2026-75768 Substance3D - Painter is affected by an Untrusted Search Path vulnerability that could… CWE-426
- CVE-2026-78680 NLTK versions before 3.10.3 fail to use validated absolute paths when invoking the… CWE-426
- CVE-2026-16869 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute… CWE-426