CVE-2016-3227

critical · 9.8

Use-after-free vulnerability in the DNS Server component in Microsoft Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted requests, aka "Windows DNS Server Use After Free Vulnerability."

9.8

CVSS

25.5%

EPSS (exploit prob.)

98th

EPSS percentile

2016-06-16

Published

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Vendor	Product	Affected versions
microsoft	windows_server_2012	all versions
microsoft	windows_server_2012	r2
microsoft	windows_server_2012	r2
microsoft	windows_server_2012	r2

Check a specific version with /api/v1/cve/match.

References

http://www.securitytracker.com/id/1036095
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-071
http://www.securitytracker.com/id/1036095
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-071

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2016-3227