CVE Database
/

CVE-2016-3352

Back to search

CVE-2016-3352

Published: Sep 14, 2016

Modified: Aug 5, 2024

PUBLISHED

Description

Microsoft Windows 8.1, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 do not properly check NTLM SSO requests for MSA logins, which makes it easier for remote attackers to determine passwords via a brute-force attack on NTLM password hashes, aka "Microsoft Information Disclosure Vulnerability."

VendorProductVersions

n/a

n/a

affected
n/a

References

MS16-110
vendor-advisory
x_refsource_MS
92852
vdb-entry
x_refsource_BID
1036798
vdb-entry
x_refsource_SECTRACK

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now