VYPR
← All advisories
High severity8.8NVD Advisory· Published Sep 14, 2016· Updated Jun 17, 2026

CVE-2016-3352

CVE-2016-3352

Description

Microsoft Windows 8.1, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 do not properly check NTLM SSO requests for MSA logins, which makes it easier for remote attackers to determine passwords via a brute-force attack on NTLM password hashes, aka "Microsoft Information Disclosure Vulnerability."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Microsoft/Windows 10 19093 versions
    cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*
  • Microsoft/Windows 8.1
    cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*
  • Microsoft/Windows Rt 8.1
    cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*
  • Microsoft/Windowsllm-fuzzy
    Range: 8.1, RT 8.1, 10 Gold, 1511, 1607

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.