Medium severity5.5NVD Advisory· Published Jan 6, 2017· Updated Jun 17, 2026
CVE-2016-4306
CVE-2016-4306
Description
Multiple information leaks exist in various IOCTL handlers of the Kaspersky Internet Security KLDISK driver. Specially crafted IOCTL requests can cause the driver to return out-of-bounds kernel memory, potentially leaking sensitive information such as privileged tokens or kernel memory addresses that may be useful in bypassing kernel mitigations. An unprivileged user can run a program from user-mode to trigger this vulnerability.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:kaspersky:total_security:16.0.0.614:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:kaspersky:total_security:16.0.0.614:*:*:*:*:*:*:*
- (no CPE)range: 16.0.0.614
Patches
Vulnerability mechanics
References
4- www.talosintelligence.com/reports/TALOS-2016-0168/nvdExploitTechnical DescriptionThird Party AdvisoryVDB Entry
- securitytracker.com/id/1036702nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1036702nvd
- www.securitytracker.com/id/1036703nvd
News mentions
0No linked articles in our index yet.