CVE-2016-3215

Description

Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 1511, and Microsoft Edge allow remote attackers to obtain sensitive information from process memory via a crafted PDF document, aka Windows PDF Information Disclosure Vulnerability, a different vulnerability than CVE-2016-3201.

Risk Information

Base Score

5.5

MODERATE

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

37.796

Associated Vulnerability

Vulnerability	OS Platform
Microsoft Edge Security Feature Bypass Vulnerability for Windows 10 Version 1511 for x64-based Systems (KB3163018) - Cumulative	Windows
Microsoft Edge Security Feature Bypass Vulnerability for Windows 10 Version 1511 (KB3163018) - Cumulative	Windows
Microsoft Edge Security Feature Bypass Vulnerability for Windows 10 for x64-based Systems (KB3163017) - Cumulative	Windows
Windows PDF Information Disclosure Vulnerability for Windows Server 2012 (KB3157569)	Windows
Windows PDF Information Disclosure Vulnerability for Windows Server 2012 R2 (KB3157569)	Windows
Windows PDF Information Disclosure Vulnerability for Windows 8.1 for x64-based Systems (KB3157569)	Windows
Windows PDF Information Disclosure Vulnerability for Windows 8.1 (KB3157569)	Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE

Patch ID	Patch Description
PATCH-20782	Cumulative Update for Windows 10 Version 1511 for x64-based Systems (KB3163018)
PATCH-20781	Cumulative Update for Windows 10 Version 1511 (KB3163018)
PATCH-20780	Cumulative Update for Windows 10 for x64-based Systems (KB3163017)
PATCH-20998	Security Update for Windows Server 2012 (KB3157569)
PATCH-21000	Security Update for Windows Server 2012 R2 (KB3157569)
PATCH-20999	Security Update for Windows 8.1 for x64-based Systems (KB3157569)
PATCH-20997	Security Update for Windows 8.1 (KB3157569)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234