CVE-2016-0179: Microsoft Windows 10

High severity, CVSS 7.8. EPSS: 24.2% chance of exploitation in the next 30 days.

Windows Shell in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Shell Remote Code Execution Vulnerability."

Affected products

• Microsoft Windows 10: any version; version 1511 only
• Microsoft Windows 8.1: any version
• Microsoft Windows Rt 8.1: any version
• Microsoft Windows Server 2012: version r2 only

Published 2016-05-11. Last modified 2026-06-17.