CVE-2016-3351
Microsoft Internet Explorer and Edge Information Disclosure Vulnerability
CVSS
6.5
Medio
EPSS
26.3%
p98
KEV
SÍ
24 may 2022
Exploit Today
79
0-100
Publicado: 14 sept 2016 · Última mod.: 14 ago 2026
Producto
Microsoft / Internet Explorer and Edge
Vulnerabilidad
Microsoft Internet Explorer and Edge Information Disclosure Vulnerability
Añadido a KEV
24 may 2022
Remediar antes de
14 jun 2022
Uso conocido en ransomware
Sí
Descripción resumida
An information disclosure vulnerability exists in the way that certain functions in Internet Explorer and Edge handle objects in memory. The vulnerability could allow an attacker to detect specific files on the user's computer.
Acción requerida
Apply updates per vendor instructions.
Notas
https://nvd.nist.gov/vuln/detail/CVE-2016-3351
Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."
- www.securityfocus.comhttp://www.securityfocus.com/bid/92788
- www.securitytracker.comhttp://www.securitytracker.com/id/1036788
- www.securitytracker.comhttp://www.securitytracker.com/id/1036789
- docs.microsoft.comhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-104
- docs.microsoft.comhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105
- www.brokenbrowser.comhttps://www.brokenbrowser.com/detecting-apps-mimetype-malware/
- www.securityfocus.comhttp://www.securityfocus.com/bid/92788
- www.securitytracker.comhttp://www.securitytracker.com/id/1036788
- www.securitytracker.comhttp://www.securitytracker.com/id/1036789
- docs.microsoft.comhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-104
- docs.microsoft.comhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105
- www.brokenbrowser.comhttps://www.brokenbrowser.com/detecting-apps-mimetype-malware/
- www.cisa.govhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-3351
Sin CVEs relacionados por CWE o producto.