CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2016-04-12
Microsoft Internet Explorer Information Disclosure and Local File Existence Detection Vulnerability (CVE-2016-0162, MS16-037)
[Affected Scope] Microsoft Internet Explorer versions 9 through 11
[Impact] Remote attackers can determine the existence of specific local files via crafted JavaScript code, facilitating targeted reconnaissance for secondary attacks
[Mitigation] Apply the MS16-037 cumulative security update or transition to Microsoft Edge and restrict legacy IE mode