CVE-2016-3351
Microsoft Internet Explorer and Edge Information Disclosure Vulnerability
CVSS
6.5
Média
EPSS
26.5%
p98
KEV
SIM
24 de mai. de 2022
Exploit Today
79
0-100
Publicado: 14 de set. de 2016 · Última mod.: 14 de ago. de 2026
Produto
Microsoft / Internet Explorer and Edge
Vulnerabilidade
Microsoft Internet Explorer and Edge Information Disclosure Vulnerability
Adicionado ao KEV
24 de mai. de 2022
Corrigir até
14 de jun. de 2022
Uso conhecido em ransomware
Sim
Descrição resumida
An information disclosure vulnerability exists in the way that certain functions in Internet Explorer and Edge handle objects in memory. The vulnerability could allow an attacker to detect specific files on the user's computer.
Ação necessária
Apply updates per vendor instructions.
Notas
https://nvd.nist.gov/vuln/detail/CVE-2016-3351
Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."
- www.securityfocus.comhttp://www.securityfocus.com/bid/92788
- www.securitytracker.comhttp://www.securitytracker.com/id/1036788
- www.securitytracker.comhttp://www.securitytracker.com/id/1036789
- docs.microsoft.comhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-104
- docs.microsoft.comhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105
- www.brokenbrowser.comhttps://www.brokenbrowser.com/detecting-apps-mimetype-malware/
- www.securityfocus.comhttp://www.securityfocus.com/bid/92788
- www.securitytracker.comhttp://www.securitytracker.com/id/1036788
- www.securitytracker.comhttp://www.securitytracker.com/id/1036789
- docs.microsoft.comhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-104
- docs.microsoft.comhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105
- www.brokenbrowser.comhttps://www.brokenbrowser.com/detecting-apps-mimetype-malware/
- www.cisa.govhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-3351
Nenhum CVE relacionado por CWE ou produto.