CVE-2016-3312

Published: Aug 9, 2016Modified: May 6, 2026

9.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability: 3.9 / Impact: 5.2

Source: NVD

Description

ActiveSyncProvider in Microsoft Windows 10 Gold and 1511 allows attackers to discover credentials by leveraging failure of Universal Outlook to obtain a secure connection, aka "Universal Outlook Information Disclosure Vulnerability."

Affected (4)

Products: Microsoft: Windows 10

Microsoft

1 product

Windows 10

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 10	All versions
Microsoft Windows 10	All versions
Microsoft Windows 10	Version 1511
Microsoft Windows 10	Version 1511

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (6)

http://www.securityfocus.com/bid/92307

Source: secure@microsoft.com

http://www.securitytracker.com/id/1036577

Source: secure@microsoft.com

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-103

Source: secure@microsoft.com

http://www.securityfocus.com/bid/92307

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1036577

Source: af854a3a-2127-422b-91ae-364da2661108

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-103

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.