CVE-2016-4288

CVE-2016-4288 describes a local privilege escalation vulnerability in BlueStacks App Player, where the installer creates a registry key with weak permissions. This flaw allows an attacker to execute arbitrary programs with SYSTEM privileges. With a CVSS score of 8.4 (High), the vulnerability is easily exploitable locally with low attack complexity, leading to high impacts on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant media coverage, though it has received minimal community discussion.