CVE-2016-3232

MEDIUM

Windows Server 2012 - Information Disclosure via Virtual PCI Uninitialized Memory

Title source: llm

Description

The Virtual PCI (VPCI) virtual service provider in Microsoft Windows Server 2012 Gold and R2 allows local users to obtain sensitive information from uninitialized memory locations via a crafted application, aka "Windows Virtual PCI Information Disclosure Vulnerability."

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1036109

Vendor Advisory vendor-advisory x_refsource_ms

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-073

Scores

CVSS v3 5.0

EPSS 0.0601

EPSS Percentile 92.5%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Details

CWE

CWE-200

Status published

Products (2)

microsoft/windows_server_2012

microsoft/windows_server_2012 r2 (3 CPE variants)

Published Jun 16, 2016

Tracked Since Feb 18, 2026