{
  "cveId": "CVE-2016-0149",
  "url": "https://patchblox.com/security/cve/CVE-2016-0149",
  "summary": "CVE-2016-0149 is fixed in 53 products on 1 platform, first by KB3156421, released May 10, 2016. It is not reported as exploited. Patch Radar priority: High.",
  "title": "TLS/SSL Information Disclosure Vulnerability",
  "description": "\u003Cp\u003EAn information disclosure vulnerability exists in the TLS/SSL protocol, implemented in the encryption component of Microsoft .NET Framework. An attacker who successfully exploited this vulnerability could decrypt encrypted SSL/TLS traffic.\u003C/p\u003E\n\u003Cp\u003ETo exploit the vulnerability, an attacker would first have to inject unencrypted data into the secure channel and then perform a \u003Ca href=\u0022https://technet.microsoft.com/en-us/library/security/dn848375.aspx#MiTM\u0022\u003Eman-in-the-middle (MiTM) attack\u003C/a\u003E between the targeted client and a legitimate server. The update addresses the vulnerability by modifying the way that the .NET encryption component sends and receives encrypted network packets.\u003C/p\u003E\n\u003Cp\u003E\u003Cstrong\u003EImportant:\u003C/strong\u003E Microsoft recommends that customers download and test the applicable update in controlled/managed environments before deploying it in their production environments.\u003C/p\u003E\n\u003Cp\u003EIn case of application compatibility issues, the recommended approach is to ensure that the server and client endpoints are correctly implementing the TLS RFC, and that they can interpret two split records containing 1, n-1 bytes respectively after this update. For more information and developer guidance, see \u003Ca href=\u0022https://support.microsoft.com/kb/3155464\u0022\u003EMicrosoft Knowledge Base Article 3155464\u003C/a\u003E.\u003C/p\u003E",
  "published": "2016-05-10T07:00:00Z",
  "severity": "Important",
  "epss": 0.08389,
  "epssPercentile": 0.95005,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": true,
  "exploitabilityAssessment": "Exploitation Unlikely",
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-0149",
  "fixes": [
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2",
      "fixedVersion": "",
      "fix": "KB3142023",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142023",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2",
      "fixedVersion": "",
      "fix": "KB3142023",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142023",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2",
      "fixedVersion": "",
      "fix": "KB3142023",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142023",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 2.0 Service Pack 2 on Windows Vista Service Pack 2",
      "fixedVersion": "",
      "fix": "KB3142023",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142023",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 2.0 Service Pack 2 on Windows Vista x64 Edition Service Pack 2",
      "fixedVersion": "",
      "fix": "KB3142023",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142023",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 3.5 on Windows 10 Version 1511 for 32-bit Systems",
      "fixedVersion": "10586.318",
      "fix": "KB3156421",
      "url": "https://patchblox.com/security/fix/microsoft/kb3156421",
      "released": "2016-05-10T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 3.5 on Windows 10 Version 1511 for x64-based Systems",
      "fixedVersion": "10586.318",
      "fix": "KB3156421",
      "url": "https://patchblox.com/security/fix/microsoft/kb3156421",
      "released": "2016-05-10T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 3.5 on Windows 10 for 32-bit Systems",
      "fixedVersion": "10240.16854",
      "fix": "KB3156387",
      "url": "https://patchblox.com/security/fix/microsoft/kb3156387",
      "released": "2016-05-10T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 3.5 on Windows 10 for x64-based Systems",
      "fixedVersion": "10240.16854",
      "fix": "KB3156387",
      "url": "https://patchblox.com/security/fix/microsoft/kb3156387",
      "released": "2016-05-10T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 3.5 on Windows 8.1 for 32-bit systems",
      "fixedVersion": "",
      "fix": "KB3142026",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142026",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 3.5 on Windows 8.1 for x64-based systems",
      "fixedVersion": "",
      "fix": "KB3142026",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142026",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 3.5 on Windows Server 2012",
      "fixedVersion": "",
      "fix": "KB3142025",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142025",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 3.5 on Windows Server 2012 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB3142025",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142025",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 3.5 on Windows Server 2012 R2",
      "fixedVersion": "",
      "fix": "KB3142026",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142026",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 3.5 on Windows Server 2012 R2 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB3142026",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142026",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 3.5.1 on Windows 7 for 32-bit Systems",
      "fixedVersion": "",
      "fix": "KB3142024",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142024",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 3.5.1 on Windows 7 for x64-based Systems Service Pack 1",
      "fixedVersion": "",
      "fix": "KB3142024",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142024",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1",
      "fixedVersion": "",
      "fix": "KB3142024",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142024",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1",
      "fixedVersion": "",
      "fix": "KB3142024",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142024",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB3142024",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142024",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 4.5.2 on Windows 7 for 32-bit Systems Service Pack 1",
      "fixedVersion": "",
      "fix": "KB3142033",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142033",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 4.5.2 on Windows 7 for x64-based Systems Service Pack 1",
      "fixedVersion": "",
      "fix": "KB3142033",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142033",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 4.5.2 on Windows 8.1 for 32-bit systems",
      "fixedVersion": "",
      "fix": "KB3142030",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142030",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 4.5.2 on Windows 8.1 for x64-based systems",
      "fixedVersion": "",
      "fix": "KB3142030",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142030",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 4.5.2 on Windows RT 8.1",
      "fixedVersion": "",
      "fix": "KB3142030",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142030",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 4.5.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1",
      "fixedVersion": "",
      "fix": "KB3142033",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142033",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 4.5.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB3142033",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142033",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 4.5.2 on Windows Server 2008 for 32-bit Systems Service Pack 2",
      "fixedVersion": "",
      "fix": "KB3142033",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142033",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 4.5.2 on Windows Server 2008 for x64-based Systems Service Pack 2",
      "fixedVersion": "",
      "fix": "KB3142033",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142033",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 4.5.2 on Windows Server 2012",
      "fixedVersion": "",
      "fix": "KB3142032",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142032",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 4.5.2 on Windows Server 2012 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB3142032",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142032",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 4.5.2 on Windows Server 2012 R2",
      "fixedVersion": "",
      "fix": "KB3142030",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142030",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 4.5.2 on Windows Server 2012 R2 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB3142030",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142030",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 4.5.2 on Windows Vista Service Pack 2",
      "fixedVersion": "",
      "fix": "KB3142033",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142033",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 4.5.2 on Windows Vista x64 Edition Service Pack 2",
      "fixedVersion": "",
      "fix": "KB3142033",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142033",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 4.6 on Windows 10 for 32-bit Systems",
      "fixedVersion": "10240.16854",
      "fix": "KB3156387",
      "url": "https://patchblox.com/security/fix/microsoft/kb3156387",
      "released": "2016-05-10T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 4.6 on Windows 10 for x64-based Systems",
      "fixedVersion": "10240.16854",
      "fix": "KB3156387",
      "url": "https://patchblox.com/security/fix/microsoft/kb3156387",
      "released": "2016-05-10T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 4.6 on Windows Server 2008 for 32-bit Systems Service Pack 2",
      "fixedVersion": "",
      "fix": "KB3142037",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142037",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 4.6 on Windows Server 2008 for x64-based Systems Service Pack 2",
      "fixedVersion": "",
      "fix": "KB3142037",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142037",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 4.6 on Windows Vista Service Pack 2",
      "fixedVersion": "",
      "fix": "KB3142037",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142037",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 4.6 on Windows Vista x64 Edition Service Pack 2",
      "fixedVersion": "",
      "fix": "KB3142037",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142037",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 4.6.1 on Windows 10 Version 1511 for 32-bit Systems",
      "fixedVersion": "10586.318",
      "fix": "KB3156421",
      "url": "https://patchblox.com/security/fix/microsoft/kb3156421",
      "released": "2016-05-10T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 4.6.1 on Windows 10 Version 1511 for x64-based Systems",
      "fixedVersion": "10586.318",
      "fix": "KB3156421",
      "url": "https://patchblox.com/security/fix/microsoft/kb3156421",
      "released": "2016-05-10T00:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 4.6/4.6.1 on Windows 7 for 32-bit Systems Service Pack 1",
      "fixedVersion": "",
      "fix": "KB3142037",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142037",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 4.6/4.6.1 on Windows 7 for x64-based Systems Service Pack 1",
      "fixedVersion": "",
      "fix": "KB3142037",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142037",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 4.6/4.6.1 on Windows 8.1 for 32-bit systems",
      "fixedVersion": "",
      "fix": "KB3142036",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142036",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 4.6/4.6.1 on Windows RT 8.1",
      "fixedVersion": "",
      "fix": "KB3142036",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142036",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 4.6/4.6.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1",
      "fixedVersion": "",
      "fix": "KB3142037",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142037",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 4.6/4.6.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB3142037",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142037",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 4.6/4.6.1 on Windows Server 2012",
      "fixedVersion": "",
      "fix": "KB3142035",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142035",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 4.6/4.6.1 on Windows Server 2012 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB3142035",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142035",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 4.6/4.6.1 on Windows Server 2012 R2",
      "fixedVersion": "",
      "fix": "KB3142036",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142036",
      "released": "2016-05-10T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft .NET Framework 4.6/4.6.1 on Windows Server 2012 R2 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB3142036",
      "url": "https://patchblox.com/security/fix/microsoft/kb3142036",
      "released": "2016-05-10T07:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T12:40:37Z"
}