{
  "cveId": "CVE-2016-0185",
  "url": "https://patchblox.com/security/cve/CVE-2016-0185",
  "summary": "CVE-2016-0185 is fixed in 6 products on 1 platform, first by KB3150220, released May 10, 2016. It is being exploited: CISA added it to the Known Exploited Vulnerabilities catalog on November 3, 2021. Patch Radar priority: Patch now.",
  "title": "Windows Media Center Remote Code Execution Vulnerability",
  "description": "\u003Cp\u003EA vulnerability exists in Windows Media Center that could allow remote code execution if Windows Media Center opens a specially crafted Media Center link (.mcl) file that references malicious code. An attacker who successfully exploited this vulnerability could take control of an affected system. Customers whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. Workstations are primarily at risk of this vulnerability.\u003C/p\u003E\n\u003Cp\u003ETo exploit the vulnerability, user interaction is required. In a web-browsing scenario, a user would have to navigate to a compromised website that an attacker is using to host a malicious .mcl file. In an email attack scenario, an attacker would have to convince a user who is logged on to a vulnerable workstation to click a specially crafted link in an email.\u003C/p\u003E\n\u003Cp\u003EThe security update addresses the vulnerability by correcting how Windows Media Center handles certain resources in the .mcl file.\u003C/p\u003E",
  "published": "2016-05-10T07:00:00Z",
  "severity": "Important",
  "epss": 0.69846,
  "epssPercentile": 0.99374,
  "priority": "Patch now",
  "priorityTier": 1,
  "exploited": true,
  "vendorExploited": false,
  "disclosed": false,
  "exploitabilityAssessment": "N/A",
  "kev": {
    "added": "2021-11-03T00:00:00Z",
    "due": "2022-05-03T00:00:00Z",
    "ransomware": false,
    "requiredAction": "Apply updates per vendor instructions."
  },
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-0185",
  "fixes": [
    {
      "platform": "microsoft",
      "product": "Windows 7 for 32-bit Systems Service Pack 1",
      "fixedVersion": "",
      "fix": "KB3150220",
      "url": "https://patchblox.com/security/fix/microsoft/kb3150220",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 7 for x64-based Systems Service Pack 1",
      "fixedVersion": "",
      "fix": "KB3150220",
      "url": "https://patchblox.com/security/fix/microsoft/kb3150220",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 8.1 for 32-bit systems",
      "fixedVersion": "",
      "fix": "KB3150220",
      "url": "https://patchblox.com/security/fix/microsoft/kb3150220",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 8.1 for x64-based systems",
      "fixedVersion": "",
      "fix": "KB3150220",
      "url": "https://patchblox.com/security/fix/microsoft/kb3150220",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Vista Service Pack 2",
      "fixedVersion": "",
      "fix": "KB3150220",
      "url": "https://patchblox.com/security/fix/microsoft/kb3150220",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Vista x64 Edition Service Pack 2",
      "fixedVersion": "",
      "fix": "KB3150220",
      "url": "https://patchblox.com/security/fix/microsoft/kb3150220",
      "released": "2016-05-10T07:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T12:40:37Z"
}