Windows Secure Kernel Mode Information Disclosure Vulnerability
| Risk | Low |
| Patch available | YES |
| Number of vulnerabilities | 1 |
| CVE-ID | CVE-2016-3256 |
| CWE-ID | CWE-119 |
| Exploitation vector | Local |
| Public exploit | N/A |
| Vulnerable software Subscribe |
Windows Operating systems & Components / Operating system |
| Vendor | Microsoft |
Security Bulletin
This security bulletin contains one low risk vulnerability.
1) Windows secure kernel mode information disclosure
EUVDB-ID: #VU130
Risk: Low
CVSSv3.1: 3.3 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2016-3256
CWE-ID:
CWE-119 - Memory corruption
Exploit availability: No
DescriptionThe vulnerability allows a local user to obtain potentially sensitive information.
The vulnerability exists due to unknown error when handling objects in memory. A local user can read sensitive information on the target system.
Successful exploitation of this vulnerability may allow a local attacker to obtain potentially sensitive information.
MitigationInstall updates from Microsoft website.
Vulnerable software versionsWindows: 10
External linkshttp://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-3256
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
