CVE-2016-7258: Microsoft Windows 10

Medium severity, CVSS 5.5. EPSS: 2.7% chance of exploitation in the next 30 days.

The kernel in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 mishandles page-fault system calls, which allows local users to obtain sensitive information from arbitrary processes via a crafted application, aka "Windows Kernel Memory Address Information Disclosure Vulnerability."

Affected products

• Microsoft Windows 10: affected versions not specified; version 1511 only; version 1607 only
• Microsoft Windows Server 2016: any version

Published 2016-12-20. Last modified 2026-06-17.