{
  "cveId": "CVE-2016-3232",
  "url": "https://patchblox.com/security/cve/CVE-2016-3232",
  "summary": "CVE-2016-3232 is fixed in 4 products on 1 platform, first by KB3164294, released June 14, 2016. It is not reported as exploited. Patch Radar priority: High.",
  "title": "Windows Virtual PCI Information Disclosure Vulnerability",
  "description": "\u003Cp\u003EAn information disclosure vulnerability exists when the Windows Virtual PCI (VPCI) virtual service provider (VSP) fails to properly handle uninitialized memory. An attacker who successfully exploited this vulnerability could potentially disclose contents of memory to which the attacker should not have access.\u003C/p\u003E\n\u003Cp\u003ETo exploit the vulnerability, an attacker would first have to log on to the target system. An attacker could then run a specially crafted application that could exploit the vulnerability. The vulnerability would not allow an attacker to execute code or elevate user rights directly, but it could be used to obtain information that could be used to attempt to further compromise the affected system.\u003C/p\u003E\n\u003Cp\u003EThe update addresses the vulnerability by correcting VPCI memory handling.\u003C/p\u003E",
  "published": "2016-06-14T12:00:00Z",
  "severity": "Important",
  "epss": 0.06014,
  "epssPercentile": 0.93372,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "exploitabilityAssessment": "N/A",
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-3232",
  "fixes": [
    {
      "platform": "microsoft",
      "product": "Windows Server 2012",
      "fixedVersion": "",
      "fix": "KB3164294",
      "url": "https://patchblox.com/security/fix/microsoft/kb3164294",
      "released": "2016-06-14T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2012 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB3164294",
      "url": "https://patchblox.com/security/fix/microsoft/kb3164294",
      "released": "2016-06-14T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2012 R2",
      "fixedVersion": "",
      "fix": "KB3164294",
      "url": "https://patchblox.com/security/fix/microsoft/kb3164294",
      "released": "2016-06-14T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2012 R2 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB3164294",
      "url": "https://patchblox.com/security/fix/microsoft/kb3164294",
      "released": "2016-06-14T12:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T06:34:28Z"
}