CVE-2016-7270

CVE-2016-7270 is an information disclosure vulnerability affecting the Data Provider for SQL Server in Microsoft .NET Framework 4.6.2. It allows remote attackers to bypass the Always Encrypted protection mechanism by exploiting a mishandled developer-supplied key, leading to the exposure of sensitive cleartext data. With a CVSS score of 7.5 (High), this vulnerability can be exploited remotely with low attack complexity, resulting in a high impact on confidentiality. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, indicating awareness within the cybersecurity landscape.