CVE-2016-3236
Critical · 9.8CVSS
9.8
EPSS
76.8%
Published
Jun 16, 2016
CISA due date
—
The record
The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mishandles proxy discovery, which allows remote attackers to redirect network traffic via unspecified vectors, aka "Windows WPAD Proxy Discovery Elevation of Privilege Vulnerability."
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2019-12828 An issue was discovered in Electronic Arts Origin before 10.5.39. CWE-19
- CVE-2019-0946 A remote code execution vulnerability exists when the Microsoft Office Access… CWE-19
- CVE-2019-0947 A remote code execution vulnerability exists when the Microsoft Office Access… CWE-19
- CVE-2019-0945 A remote code execution vulnerability exists when the Microsoft Office Access… CWE-19
- CVE-2019-0801 A remote code execution vulnerability exists when Microsoft Office fails to properly… CWE-19
- CVE-2019-0630 A remote code execution vulnerability exists in the way that the Microsoft Server Message… CWE-19
- CVE-2019-0633 A remote code execution vulnerability exists in the way that the Microsoft Server Message… CWE-19
- CVE-2009-5155 In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c… CWE-19