CVE-2016-3236: Critical severity windows 10 vulnerability

Published Jun 16, 2016

Updated

The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mishandles proxy discovery, which allows remote attackers to redirect network traffic via unspecified vectors, aka "Windows WPAD Proxy Discovery Elevation of Privilege Vulnerability."

Affected Software

10 affected components

Microsoft Windows 10

Microsoft Windows 10=1511

Microsoft Windows 7=sp1

Microsoft Windows 8.1

Microsoft Windows RT 8.1

Microsoft Windows Server 2008=sp2

Microsoft Windows Server 2008=r2-sp1

Microsoft Windows Server 2012

Microsoft Windows Server 2012=r2

Microsoft Windows Vista=sp2

Event History

Jun 16, 2016

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3236?

CVE-2016-3236 has a critical severity rating due to its potential for remote code execution.

How do I fix CVE-2016-3236?

To mitigate CVE-2016-3236, apply the latest security updates provided by Microsoft for the affected Windows versions.

What systems are affected by CVE-2016-3236?

CVE-2016-3236 affects multiple versions of Microsoft Windows including Windows Vista, 7, 8.1, 10, and various Windows Server versions.

Can CVE-2016-3236 be exploited remotely?

Yes, CVE-2016-3236 can be exploited by remote attackers to gain unauthorized access to systems.

Is there a workaround for CVE-2016-3236?

Disabling the Web Proxy Auto Discovery (WPAD) feature can serve as a temporary workaround for CVE-2016-3236.