CVE-2016-7258

—

CVSS 3.0

5.5 medium

EPSS

3%p85

Published

Dec 20, 2016 (Dec 20, 2016)

Modified

Jun 17, 2026

Description

The kernel in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 mishandles page-fault system calls, which allows local users to obtain sensitive information from arbitrary processes via a crafted application, aka "Windows Kernel Memory Address Information Disclosure Vulnerability."

Vendors: microsoft
Products: windows 10, windows server 2016
Weakness: CWE-200
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (2.7%)

In the news1 stories

Microsoft Patch Tuesday

Cisco TalosDec 13, 20:00 UTC · Dec 13, 2016Vulnerability CVE-2016-7202 CVE-2016-7279 CVE-2016-7283+40 CVEs