VULNERABILITY INTELLIGENCE
CVE-2016-0142
CVSS score7.8 HIGH
EPSS probability20.41%
CISA KEVNot currently listed
Published2016-10-14
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
Video Control in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Video Control Remote Code Execution Vulnerability."
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
- CWE-284: Improper Access Control