CVE-2016-3352 is an information disclosure vulnerability affecting Microsoft Windows 8.1, RT 8.1, and Windows 10 versions Gold, 1511, and 1607. It stems from improper NTLM SSO request checks for MSA logins, allowing remote attackers to brute-force NTLM password hashes. With a CVSS score of 8.8 (High), this vulnerability has a network attack vector, low complexity, and high impact on confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, its EPSS and FAUCET scores indicate significant risk, and it has received some community discussion and media coverage, though no public exploit code or Metasploit modules are currently available.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:* | ||
1511CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:* | ||
1607CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:* | ||
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:* | ||
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.1 Security Researcher mentions.