Actively exploited in the wild

Microsoft Internet Explorer and Edge Information Disclosure Vulnerability

Microsoft - Internet Explorer and Edge · Listed in the CISA KEV since 2022-05-24. This indicates confirmed attacks in production environments.

Required action: Apply updates per vendor instructions.

CVE-2016-3351

MediumCVSS 6.5KEV

Published: 14/09/2016(UTC)Updated: 14/08/2026(UTC)Translated: 14/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

26.29%

98th percentile - higher than 98% of all known CVEs

Summary

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka 'Microsoft Browser Information Disclosure Vulnerability.'

Risk Assessment

Information disclosure could expose user data to unauthorized access, potentially leading to identity theft or other attacks.

Recommendation

Install the latest security updates for Internet Explorer and Edge. Consider migrating to a modern, supported browser.

Original NVD description (English source)

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."