Skip to content
feed: live
0dayNews
CVE Record
[ HIGH ]CVE-2016-0165

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.

Vendor
Microsoft
Product
Win32k
CVSS
7.8
EPSS (exploit probability)
13.7%
Status
kev
CISA patch-by (BOD 22-01)
Added to KEV

Is CVE-2016-0165 being exploited?

Yes. CISA added CVE-2016-0165 to its Known Exploited Vulnerabilities catalog on . CISA only lists a CVE when it has reliable evidence of exploitation in the wild.

FIRST's EPSS model puts the probability of exploitation activity in the next 30 days at 13.7% (scored October 27, 2026).

Catalog snapshot 2026-11-13. Full cross-catalog view: /kev-comparison

CVE-2016-0165 timeline

  1. Published to NVD
  2. Added to CISA KEV+2627d

Every event links to its source. Catalog dates are each catalog's own; day offsets count from NVD publication. Data: JSON

What to do

CISA required actionApply updates per vendor instructions.

US federal civilian agencies must remediate by (21 days after listing) under BOD 22-01. Everyone else: that deadline is a sensible upper bound, not a target. Vendor guidance and the NVD record are linked under Source above.

CVE / VulnerabilitySeverityCVSSEPSSAdded to KEV
CVE-2023-29336
Microsoft Win32K Privilege Escalation Vulnerability
[ HIGH ]7.841.2%
CVE-2015-2360
Microsoft Win32k Privilege Escalation Vulnerability
[ HIGH ]8.814.8%
CVE-2018-8589
Microsoft Win32k Privilege Escalation Vulnerability
[ HIGH ]7.83.0%
CVE-2014-4113
Microsoft Win32k Privilege Escalation Vulnerability
[ HIGH ]7.886.6%
CVE-2021-41357
Microsoft Win32k Privilege Escalation Vulnerability
[ HIGH ]7.81.5%
CVE-2021-40450
Microsoft Win32k Privilege Escalation Vulnerability
[ HIGH ]7.81.5%
CVE-2013-3660
Microsoft Win32k Privilege Escalation Vulnerability
[ HIGH ]7.839.3%
CVE-2019-1132
Microsoft Win32k Privilege Escalation Vulnerability
[ HIGH ]7.89.9%
All 25 Microsoft Win32k known exploited vulnerabilities →