CVEvulnerability
CVE-2016-3302
6.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2016-09-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.3 MEDIUM — CVSS:3.0/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.2 MEDIUM — AV:L/AC:H/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607, when the lock screen is enabled, do not properly restrict the loading of web content, which allows physically proximate attackers to execute arbitrary code via a (1) crafted Wi-Fi access point or (2) crafted mobile-broadband device, aka "Windows Lock Screen Elevation of Privilege Vulnerability."
Affected configurations
• microsoft windows 10
• microsoft windows 10 1511
• microsoft windows 10 1607
• microsoft windows 8.1
• microsoft windows rt 8.1
• microsoft windows server 2012 r2
Related
Weakness · not in database (1)
References
- http://www.securityfocus.com/bid/92853 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1036799 Third Party Advisory, VDB Entry
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-112 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/92853 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1036799 Third Party Advisory, VDB Entry
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-112 Patch, Vendor Advisory