CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2016-10-14
Microsoft Internet Explorer and Windows Internet Messaging API Information Disclosure Vulnerability (CVE-2016-3298)
[Affected Scope] Internet Explorer 9 through 11 and Internet Messaging API on Windows Vista SP2, Server 2008 SP2/R2 SP1, and Windows 7 SP1.
[Impact] Remote attackers can determine the existence of arbitrary local files via a crafted website, facilitating targeted secondary attacks.
[Mitigation] Apply official Microsoft security updates (MS16-118, MS16-126) and disable legacy Internet Explorer components.