CVE-2016-0101

—

CVSS 3.0

8.8 high

EPSS

20%p97

Published

Mar 9, 2016 (Mar 9, 2016)

Modified

Jun 17, 2026

Description

Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow remote attackers to execute arbitrary code via crafted media content, aka "Windows Media Parsing Remote Code Execution Vulnerability."

Vendors: microsoft
Products: windows 10, windows 7, windows 8.1, windows rt 8.1, windows server 2008, windows server 2012
Weakness: CWE-20
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (20.1%)

In the news1 stories

Microsoft Patch Tuesday

Cisco TalosMar 8, 20:00 UTC · Mar 8, 2016Vulnerability CVE-2016-0121 CVE-2016-0120 CVE-2016-0101+14 CVEs