CVE-2016-0036

high · 8.1

The Remote Desktop Protocol (RDP) implementation in Microsoft Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows remote authenticated users to execute arbitrary code via crafted data, aka "Remote Desktop Protocol (RDP) Elevation of Privilege Vulnerability."

8.1

CVSS

11.4%

EPSS (exploit prob.)

96th

EPSS percentile

2016-02-10

Published

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-264

Affected products

Vendor	Product	Affected versions
microsoft	windows_10	all versions
microsoft	windows_7	all versions
microsoft	windows_8.1	all versions
microsoft	windows_server_2012	all versions
microsoft	windows_server_2012	r2

Check a specific version with /api/v1/cve/match.

References

http://www.securitytracker.com/id/1034981
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-017
http://www.securitytracker.com/id/1034981
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-017

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2016-0036