CVE-2016-3369

Windows IPSec Denial of Service Vulnerability

CVE-2016-3369 is fixed in 4 products on 1 platform, first by KB3185614, released September 13, 2016. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
5.7
Important
Exploitation
None reported
Exploitation Unlikely
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.1220
96th percentile

<p>A denial of service vulnerability exists in the way that Windows handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding. Note that the denial of service condition would not allow an attacker to execute code or to elevate user privileges. However, the denial of service condition could prevent authorized users from using system resources.</p> <p>The security update addresses the vulnerability by correcting how Windows handles objects in memory.</p>

Where it's fixed

ProductFixed inFixReleased
Microsoft
Windows 10 Version 1511 for 32-bit Systems 10586.589 KB3185614 Sep 13, 2016
Windows 10 Version 1511 for x64-based Systems 10586.589 KB3185614 Sep 13, 2016
Windows 10 for 32-bit Systems 10240.17113 KB3185611 Sep 13, 2016
Windows 10 for x64-based Systems 10240.17113 KB3185611 Sep 13, 2016