CVE-2016-7292

The Installer in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Windows Installer Elevation of Privilege Vulnerability."

• CWE-19

• http://www.securityfocus.com/bid/94768Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037450Third Party Advisory, VDB Entry
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-149
• http://www.securityfocus.com/bid/94768Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037450Third Party Advisory, VDB Entry
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-149

Published

Dec 20, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-7286The scripting engines in Microsoft Edge allow remote attacke…
• CVE-2016-7287The scripting engines in Microsoft Internet Explorer 11 and …
• CVE-2016-7288The scripting engines in Microsoft Edge allow remote attacke…
• CVE-2016-7289Microsoft Publisher 2010 SP2 allows remote attackers to exec…
• CVE-2016-7290Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Off…
• CVE-2016-7291Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Off…
• CVE-2016-7293Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-7294Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-7295The Common Log File System (CLFS) driver in Microsoft Window…
• CVE-2016-7296The scripting engines in Microsoft Edge allow remote attacke…
• CVE-2016-7297The scripting engines in Microsoft Edge allow remote attacke…
• CVE-2016-7298Microsoft Office 2007 SP3, Office 2010 SP2, Word Viewer, Off…