CVE-2016-3226: Microsoft Windows Server 2008

Medium severity, CVSS 6.5. EPSS: 10.7% chance of exploitation in the next 30 days.

Active Directory in Microsoft Windows Server 2008 R2 SP1 and Server 2012 Gold and R2 allows remote authenticated users to cause a denial of service (service hang) by creating many machine accounts, aka "Active Directory Denial of Service Vulnerability."

Affected products

• Microsoft Windows Server 2008: version r2 only
• Microsoft Windows Server 2012: affected versions not specified; version r2 only

Published 2016-06-16. Last modified 2026-06-17.