CVE-2016-3232

MEDIUM

Microsoft Windows Server 2012 - Information Disclosure

Title source: rule

Description

The Virtual PCI (VPCI) virtual service provider in Microsoft Windows Server 2012 Gold and R2 allows local users to obtain sensitive information from uninitialized memory locations via a crafted application, aka "Windows Virtual PCI Information Disclosure Vulnerability."

References (2)

Scores

CVSS v3 5.0
EPSS 0.1680
EPSS Percentile 94.9%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Classification

CWE
CWE-200
Status draft

Affected Products (4)

microsoft/windows_server_2012
microsoft/windows_server_2012
microsoft/windows_server_2012
microsoft/windows_server_2012

Timeline

Published Jun 16, 2016
Tracked Since Feb 18, 2026