Vulnerability Spotlight: Windows 10 Remote Denial of Service
Summary: Cisco Talos disclosed a remote denial-of-service vulnerability in Microsoft Windows 10's AHCACHE.SYS driver, tracked as TALOS-2016-0191 and CVE-2016-3369, where a crafted portable executable file causes the driver to access out-of-scope memory and crash the Windows kernel. The flaw sits in the 'AslpFileQueryVersionString' function, which reads the EDI value from the PE resource variable without bounds checking, and Microsoft patched it in security update 3178467 under Security Bulletin MS16-110.
What's compelling: A single malicious PE file that a user merely accesses can bugcheck the kernel and deny service, and Talos notes the attacker cannot execute code or elevate privileges through it - so the exposure is availability, not takeover. Talos released Snort rules 40555-40556 to detect exploitation attempts.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2016-3369
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026