CVE-2016-3272

EUVD-2016-4305
The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mishandles page-fault system calls, which allows local users to obtain sensitive information from an arbitrary process via a crafted application, aka "Windows Kernel Information Disclosure Vulnerability."
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
2.8 LOW
LOCAL
LOW
LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 94%
Affected Products (NVD)
VendorProductVersion
microsoftwindows_10
-
microsoftwindows_7
*
microsoftwindows_rt_8.1
-
microsoftwindows_server_2012
-
𝑥
= Vulnerable software versions
Windows Releases
Platform
Version
Windows 10
(x64, x86)
KB3163912
1511 (x64, x86)
KB3172985
Windows 8.1
(x64, x86)
KB3169704
Windows RT 8.1
All
KB3169704
Windows Server 2012
Server Core
KB3169704
Standard
KB3169704
Windows Server 2012 R2
Server Core
KB3169704
Standard
KB3169704
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/91603
http://www.securitytracker.com/id/1036289
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-092
http://www.securityfocus.com/bid/91603
http://www.securitytracker.com/id/1036289
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-092