CVE-2016-10072

CVE-2016-10072 describes a weak Access Control List (ACL) vulnerability in WampServer 3.0.6, specifically affecting the 'wampmanager.exe' and 'unins000.exe' files. This flaw could allow an authorized, non-privileged local user to replace these executables with malicious code, leading to arbitrary code execution with elevated privileges when a more privileged user launches them. The vulnerability has a CVSS score of 7.5 (HIGH), indicating a local attack vector with high attack complexity, requiring user interaction, and potentially leading to high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.