CVE-2016-3351
Microsoft Internet Explorer and Edge Information Disclosure Vulnerability
CVSS
6.5
Medium
EPSS
26.3%
p98
KEV
YES
May 24, 2022
Exploit Today
79
0-100
Published: Sep 14, 2016 · Last modified: Aug 14, 2026
Product
Microsoft / Internet Explorer and Edge
Vulnerability
Microsoft Internet Explorer and Edge Information Disclosure Vulnerability
Added to KEV
May 24, 2022
Remediate by
Jun 14, 2022
Known ransomware use
Yes
Summary description
An information disclosure vulnerability exists in the way that certain functions in Internet Explorer and Edge handle objects in memory. The vulnerability could allow an attacker to detect specific files on the user's computer.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2016-3351
Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."
- www.securityfocus.comhttp://www.securityfocus.com/bid/92788
- www.securitytracker.comhttp://www.securitytracker.com/id/1036788
- www.securitytracker.comhttp://www.securitytracker.com/id/1036789
- docs.microsoft.comhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-104
- docs.microsoft.comhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105
- www.brokenbrowser.comhttps://www.brokenbrowser.com/detecting-apps-mimetype-malware/
- www.securityfocus.comhttp://www.securityfocus.com/bid/92788
- www.securitytracker.comhttp://www.securitytracker.com/id/1036788
- www.securitytracker.comhttp://www.securitytracker.com/id/1036789
- docs.microsoft.comhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-104
- docs.microsoft.comhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105
- www.brokenbrowser.comhttps://www.brokenbrowser.com/detecting-apps-mimetype-malware/
- www.cisa.govhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-3351
No related CVEs by CWE or product.