{
  "cveId": "CVE-2016-3227",
  "url": "https://patchblox.com/security/cve/CVE-2016-3227",
  "summary": "CVE-2016-3227 is fixed in 4 products on 1 platform, first by KB3161951, released June 14, 2016. It is not reported as exploited. Patch Radar priority: Urgent.",
  "title": "Windows DNS Server Use After Free Vulnerability",
  "description": "\u003Cp\u003EA remote code execution vulnerability exists in Windows \u003Ca href=\u0022undefinedhttps://technet.microsoft.com/en-us/library/security/dn848375.aspx#DNS\u0022\u003EDomain Name System (DNS)\u003C/a\u003E servers when they fail to properly handle requests. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the Local System Account. Windows servers that are configured as DNS servers are at risk from this vulnerability.\u003C/p\u003E\n\u003Cp\u003ETo exploit the vulnerability, an unauthenticated attacker could send malicious requests to a Windows DNS server.\u003C/p\u003E\n\u003Cp\u003EThe update addresses the vulnerability by modifying how Windows DNS servers handle requests.\u003C/p\u003E",
  "published": "2016-06-14T12:00:00Z",
  "severity": "Critical",
  "epss": 0.25462,
  "epssPercentile": 0.9796,
  "priority": "Urgent",
  "priorityTier": 2,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "exploitabilityAssessment": "Exploitation Less Likely",
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-3227",
  "fixes": [
    {
      "platform": "microsoft",
      "product": "Windows Server 2012",
      "fixedVersion": "",
      "fix": "KB3161951",
      "url": "https://patchblox.com/security/fix/microsoft/kb3161951",
      "released": "2016-06-14T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2012 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB3161951",
      "url": "https://patchblox.com/security/fix/microsoft/kb3161951",
      "released": "2016-06-14T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2012 R2",
      "fixedVersion": "",
      "fix": "KB3161951",
      "url": "https://patchblox.com/security/fix/microsoft/kb3161951",
      "released": "2016-06-14T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2012 R2 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB3161951",
      "url": "https://patchblox.com/security/fix/microsoft/kb3161951",
      "released": "2016-06-14T12:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T06:34:28Z"
}