CVE-2016-3298
Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability
CVSS
—
No CVSS
EPSS
33.3%
p98
KEV
YES
May 24, 2022
Exploit Today
80
0-100
Published: — · Last modified: —
33.3%EPSS · 30 days33.3%
2026-09-172026-10-15
Product
Microsoft / Internet Explorer
Vulnerability
Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability
Added to KEV
May 24, 2022
Remediate by
Jun 14, 2022
Known ransomware use
No
Summary description
An information disclosure vulnerability exists when the Microsoft Internet Messaging API improperly handles objects in memory. An attacker who successfully exploited this vulnerability could allow the attacker to test for the presence of files on disk.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2016-3298
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2021-270858.8 HIG92.6%
KEV—78Microsoft Internet Explorer Remote Code Execution Vulnerability58dCVE-2021-264118.8 HIG99.6%
KEV—80Microsoft Internet Explorer Memory Corruption Vulnerability14dCVE-2019-07527.5 HIG99.6%
KEV—80Microsoft Internet Explorer Type Confusion Vulnerability65dCVE-2010-3962—99.9%
KEV—80Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability—CVE-2010-0249—99.8%
KEV—80Microsoft Internet Explorer Use-After-Free Vulnerability—CVE-2016-0189—99.8%
KEV—80Microsoft Internet Explorer Memory Corruption Vulnerability—