vulnerability
Microsoft Windows: CVE-2016-3312: Universal Outlook Information Disclosure Vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:L/Au:N/C:P/I:N/A:N) | Aug 9, 2016 | Jun 10, 2024 | May 8, 2026 |
Severity
5
CVSS
(AV:N/AC:L/Au:N/C:P/I:N/A:N)
Published
Aug 9, 2016
Added
Jun 10, 2024
Modified
May 8, 2026
Description
ActiveSyncProvider in Microsoft Windows 10 Gold and 1511 allows attackers to discover credentials by leveraging failure of Universal Outlook to obtain a secure connection, aka "Universal Outlook Information Disclosure Vulnerability."
Solutions
microsoft-windows-windows_10-1507-kb3176492microsoft-windows-windows_10-1511-kb3176493
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.