CVE-2026-119889

Out-of-bounds read in ActiveSyncProvider allows an unauthorized attacker to disclose information over a network...

EUVD-2026-122397

Out-of-bounds read in ActiveSyncProvider allows an unauthorized attacker to disclose information over a network...

CVE-2026-119889

Out-of-bounds read in ActiveSyncProvider allows an unauthorized attacker to disclose information over a network...

Windows Account Compromise

The vulnerability of the ActiveSyncProvider library in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to gain access to accounts by exploiting a flaw in Universal Outlook to establish a secure connection...

Microsoft ActiveSyncProvider Universal Outlook Information Disclosure Vulnerability (3182332)

This host is missing an important security update according to Microsoft Bulletin MS16-103. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2016-3312

ActiveSyncProvider in Microsoft Windows 10 Gold and 1511 allows attackers to discover credentials by leveraging failure of Universal Outlook to obtain a secure connection, aka "Universal Outlook Information Disclosure Vulnerability."...

CVE-2016-3312

ActiveSyncProvider in Microsoft Windows 10 Gold and 1511 allows attackers to discover credentials by leveraging failure of Universal Outlook to obtain a secure connection, aka "Universal Outlook Information Disclosure Vulnerability."...

Information disclosure

ActiveSyncProvider in Microsoft Windows 10 Gold and 1511 allows attackers to discover credentials by leveraging failure of Universal Outlook to obtain a secure connection, aka "Universal Outlook Information Disclosure Vulnerability."...

CVE-2016-3312

ActiveSyncProvider in Microsoft Windows 10 Gold and 1511 allows attackers to discover credentials by leveraging failure of Universal Outlook to obtain a secure connection, aka "Universal Outlook Information Disclosure Vulnerability."...

CVE-2016-3312

CVE-2016-3312 is an information-disclosure vulnerability in Microsoft Windows where Universal Outlook/ActiveSyncProvider could leak credentials when a secure connection could not be established. Multiple connected sources confirm the issue affects Windows 10 (Gold) and 1511, enabling an attacker ...

Cumulative update for Windows 10: August 9, 2016

Cumulative update for Windows 10: August 9, 2016 Applies To Windows 10 Important This article contains information that shows you how to help lower security settings or how to turn off security features on a computer. You can make these changes to work around a specific problem. Before you make...

Cumulative update for Windows 10 Version 1511: August 9, 2016

Cumulative update for Windows 10 Version 1511: August 9, 2016 Applies To Windows 10, version 1511, all editions Important This article contains information that shows you how to help lower security settings or how to turn off security features on a computer. You can make these changes to work...

CVE-2016-3312: Exposure of Sensitive Information to an Unauthorized Actor

ActiveSyncProvider in Microsoft Windows 10 Gold and 1511 allows attackers to discover credentials by leveraging failure of Universal Outlook to obtain a secure connection, aka "Universal Outlook Information Disclosure Vulnerability."...

PT-2016-2576

Name of the Vulnerable Software and Affected Versions Microsoft Windows 10 versions Gold and 1511 Description The issue is related to the ActiveSyncProvider in Microsoft Windows, which fails to properly secure service data. This allows attackers to discover credentials by leveraging a failure of...

MS16-103: Security Update for ActiveSyncProvider (3182332)

The remote Windows host is missing a security update. It is, therefore, affected by an information disclosure vulnerability in ActiveSyncProvider when Universal Outlook fails to establish a secure connection. An unauthenticated, remote attacker can exploit this to disclose the username and passwo...