CVE-2016-3352
high · 8.8Microsoft Windows 8.1, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 do not properly check NTLM SSO requests for MSA logins, which makes it easier for remote attackers to determine passwords via a brute-force attack on NTLM password hashes, aka "Microsoft Information Disclosure Vulnerability."
8.8
CVSS
20.8%
EPSS (exploit prob.)
97th
EPSS percentile
2016-09-14
Published
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-285
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | windows_10 | all versions |
| microsoft | windows_10 | 1511 |
| microsoft | windows_10 | 1607 |
| microsoft | windows_8.1 | all versions |
| microsoft | windows_rt_8.1 | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://www.securityfocus.com/bid/92852
- http://www.securitytracker.com/id/1036798
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-110
- http://www.securityfocus.com/bid/92852
- http://www.securitytracker.com/id/1036798
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-110
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2016-3352