CVE-2016-4306

CVE-2016-4306 describes multiple information leak vulnerabilities within the KLDISK driver of Kaspersky Internet Security and Kaspersky Total Security. Specially crafted IOCTL requests can cause the driver to return out-of-bounds kernel memory, potentially exposing sensitive data like privileged tokens or kernel memory addresses. With a CVSS score of 5.5 (Medium), this vulnerability allows an unprivileged local user to achieve high confidentiality impact without user interaction. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion, though it received limited media coverage at the time of disclosure.