Exploit for CVE-2016-7255

kitploit · 2026-08-25

Description

Win32k elevation of privilege in Windows 10 and others via a crafted application.

Affected software

Microsoft Windows 10 1507 All versions

Microsoft Windows 10 1511 All versions

Microsoft Windows 10 1607 All versions

Microsoft Windows 7 All versions

All known vulnerabilities by product

Windows Windows 10 Windows 7 Windows 8.1 Windows Rt 8.1 Windows Server 2008 Windows Server 2012 Windows Server 2016

CVSS 7.8 for CVE-2016-7255

7.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector:LOCAL

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:REQUIRED

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

CVE Information

Exploit Details

Modified:2026-08-25 20:40

Last Seen:2026-08-26 02:15

Reporter:KitPloit

Tags

Win32kWindows 10elevation of privilegekernel-mode driverlocal privilege escalationMS16-135

Other exploits for CVE-2016-7255

page-table-exploitation

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

cve-2016-7255_x86_x64

2026-08-25 KitPloitKITPLOIT

Win32k ConsoleControl Offset Confusion / Privilege Escalation Exploit

2022-02-28 metasploitZDTRuby

Win32k ConsoleControl Offset Confusion / Privilege Escalation

2022-02-28 Spencer McIntyre, BITTER APT, LiHao, KaLendsi, MaDongZe, TuXiaoYi, JinQuan, L4ys, metasploit.comPACKETSTORMRuby

Win32k ConsoleControl Offset Confusion

2021-03-19 BITTER APT, JinQuan, MaDongZe, TuXiaoYi, LiHao, KaLendsi, Spencer McIntyreMETASPLOITRuby

Win32k ConsoleControl Offset Confusion

2021-03-19 Spencer McIntyrePACKETSTORMRuby

Exploit Code

MARKDOWN4 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-HOMJXI0E-CVE-2016-7255
# CVE-2016-7255

Microsoft Windows Vista SP2, Windows Server 2008 SP2 및 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold 및 R2, Windows RT 8.1, Windows 10 Gold, 1511 및 1607, Windows Server 2016의 커널 모드 드라이버는 제작된 응용 프로그램을 통해 로컬 사용자가 권한을 상승할 수 있도록 허용합니다. 일명 "Win32k 권한 상승 취약점"입니다. 리비아에서 온 성인 17세의 Gihad Security와 함께. 이 취약점은 MS16-135라고 불립니다.