CVE-2016-3256 — Sensitive Information Exposure in Microsoft Windows 10

CWE-200 — Sensitive Information Exposure5 documents4 sources
Severity
5.0MEDIUMNVD
EPSS
4.7%
top 10.65%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Microsoft Windows 10Msrc Windows 10 FOR 32-bit SystemsMsrc Windows 10 FOR X64-based Systems+2 more
Timeline
PublishedJul 13
Latest updateMay 14

Description

Microsoft Windows 10 Gold and 1511 allows local users to bypass the Secure Kernel Mode protection mechanism and obtain sensitive information via a crafted application, aka "Windows Secure Kernel Mode Information Disclosure Vulnerability."

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:NExploitability: 1.3 | Impact: 3.6

Affected Packages5 packages

🔴Vulnerability Details

1
GHSA
GHSA-963w-778f-jpmw: Microsoft Windows 10 Gold and 1511 allows local users to bypass the Secure Kernel Mode protection mechanism and obtain sensitive information via a cra↗2022-05-14
▶

📋Vendor Advisories

1
Microsoft
Windows Secure Kernel Mode Information Disclosure Vulnerability↗2016-07-12
▶

🕵️Threat Intelligence

2
Talos
Microsoft Patch Tuesday - July 2016↗2016-07-12
▶
Talos
Microsoft Patch Tuesday - July 2016↗2016-07-12
▶