Vulnerability in Microsoft Windows_10

CVE-2016-3237

Kerberos in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows man-in-the-middle attackers to bypass auth…

EPSS: 0.249 (96.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

Public proof-of-concept exploits

References

  • 92290 (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_BID)
  • MS16-101 (x_refsource_MS, vendor-advisory, Patch, Vendor Advisory)
  • 1036576 (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_SECTRACK)
  • 40409 (Exploit, exploit, Third Party Advisory, VDB Entry, x_refsource_EXPLOIT-DB)

Frequently asked questions

What is CVE-2016-3237?
CVE-2016-3237 is a high-severity vulnerability in Microsoft Windows_10, classified under CWE-264. CVSS score: 7.5/10. Published 2016-08-09.
How severe is CVE-2016-3237?
High severity. CVSS v3 base score is 7.5 out of 10.
Is CVE-2016-3237 known to be exploited?
2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.