Netskope Threat Labs

OS-WINDOWS Microsoft Windows api-ms-win-appmodel-runtime dll-load exploit attempt

IPS-SWG

1 SID: 38469

First seen
May 2025
Last seen
April 2026

Detects an attempt to exploit CVE-2016-0148 and CVE-2016-0160, a known vulnerability that can compromise the target in Microsoft Windows api-ms-win-appmodel-runtime dll-load exploit.