CVEvulnerability
CVE-2016-3351
CISA Known Exploited Vulnerability
Microsoft Internet Explorer and Edge Information Disclosure Vulnerability — Microsoft Internet Explorer and Edge
An information disclosure vulnerability exists in the way that certain functions in Internet Explorer and Edge handle objects in memory. The vulnerability could allow an attacker to detect specific files on the user's computer.
- Added to KEV
- 2022-05-24
- Remediation due
- 2022-06-14
- Ransomware use
- Known
- Required action
- Apply updates per vendor instructions.
- Notes
- https://nvd.nist.gov/vuln/detail/CVE-2016-3351
- Status
- Analyzed
- Published
- 2016-09-14
- Last modified
- 2026-08-14
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 2.6 LOW — AV:N/AC:H/Au:N/C:P/I:N/A:N
Description
Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."
Affected configurations
• microsoft internet explorer 9
• microsoft internet explorer 10
• microsoft internet explorer 11
• microsoft edge
References
- http://www.securityfocus.com/bid/92788 Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1036788 Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1036789 Broken Link, Third Party Advisory, VDB Entry
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-104 Patch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105 Patch, Vendor Advisory
- https://www.brokenbrowser.com/detecting-apps-mimetype-malware/ Exploit
- http://www.securityfocus.com/bid/92788 Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1036788 Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1036789 Broken Link, Third Party Advisory, VDB Entry
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-104 Patch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105 Patch, Vendor Advisory
- https://www.brokenbrowser.com/detecting-apps-mimetype-malware/ Exploit
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-3351 US Government Resource