Windows secure kernel mode information disclosure in Windows - CVE-2016-3256

Detailed vulnerability description

The vulnerability allows a local user to obtain potentially sensitive information.

The vulnerability exists due to unknown error when handling objects in memory. A local user can read sensitive information on the target system.

Successful exploitation of this vulnerability may allow a local attacker to obtain potentially sensitive information.

How to mitigate CVE-2016-3256

To resolve this vulnerability vendor recommends installing the following updates:

Windows 10

Windows 10 for 32-bit Systems
Windows 10 for x64-based Systems
Windows 10 Version 1511 for 32-bit Systems
Windows 10 Version 1511 for x64-based Systems

Sources

• https://technet.microsoft.com/en-us/library/security/MS16-089
• https://technet.microsoft.com/en-us/library/security/ms16-089.aspx