KLA11831 OSI vulnerability in Microsoft Windows

An information disclosure vulnerability vulnerability was found in Microsoft Windows. Malicious users can exploit this vulnerability to obtain sensitive information.

Original advisories

CVE-2016-3272

Related products

Microsoft-Windows

Microsoft-Windows-Server

Microsoft-Windows-Server-2012

Microsoft-Windows-8

Windows-RT

Microsoft-Windows-10

CVE list

CVE-2016-3272 warning

KB list

3172985

3163912

3169704

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

• PE

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

Affected Products

• Windows 10 Version 1511 for 32-bit SystemsWindows Server 2012 (Server Core installation)Windows Server 2012 R2 (Server Core installation)Windows 10 Version 1511 for x64-based SystemsWindows 8.1 for 32-bit systemsWindows Server 2012Windows 10 for x64-based SystemsWindows Server 2012 R2Windows RT 8.1Windows 8.1 for x64-based systemsWindows 10 for 32-bit Systems