CVE-2016-3344 — Sensitive Information Exposure in Microsoft Windows 10

CWE-200 — Sensitive Information Exposure3 documents3 sources

Severity

3.3LOWNVD

EPSS

1.6%

top 18.45%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Microsoft Windows 10 Msrc Windows 10 FOR 32-bit Systems Msrc Windows 10 FOR X64-based Systems +2 more

Timeline

PublishedSep 14

Latest updateMay 14

Description

The Secure Kernel Mode feature in Microsoft Windows 10 Gold and 1511 allows local users to obtain sensitive information via a crafted application, aka "Windows Secure Kernel Mode Information Disclosure Vulnerability."

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 1.8 | Impact: 1.4

Affected Packages5 packages

▶NVDmicrosoft/windows_101511

▶msrcmsrc/windows_10_version_1511_for_32-bit_systems

▶msrcmsrc/windows_10_version_1511_for_x64-based_systems

▶msrcmsrc/windows_10_for_32-bit_systems

▶msrcmsrc/windows_10_for_x64-based_systems

🔴Vulnerability Details

GHSA

GHSA-xvxv-v375-9q9p: The Secure Kernel Mode feature in Microsoft Windows 10 Gold and 1511 allows local users to obtain sensitive information via a crafted application, aka↗2022-05-14

▶

📋Vendor Advisories

Microsoft

Windows Secure Kernel Mode Information Disclosure Vulnerability↗2016-09-13

▶