CVE-2016-3312

Critical

Published: 09/08/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The vulnerability in ActiveSyncProvider in Microsoft Windows 10 Gold and 1511 allows attackers to discover credentials by leveraging the failure of Universal Outlook to obtain a secure connection.

Risk Assessment

Organizations may be exposed to the disclosure of sensitive authentication data, potentially leading to unauthorized access to systems.

Recommendation

It is recommended to update Windows to the latest version and monitor access logs for potential attack attempts.

Original NVD description (English source)

ActiveSyncProvider in Microsoft Windows 10 Gold and 1511 allows attackers to discover credentials by leveraging failure of Universal Outlook to obtain a secure connection, aka "Universal Outlook Information Disclosure Vulnerability."