Back to KEVs

CVE-2016-3298

Microsoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1...

Basic Information

CVE State
PUBLISHED
Reserved Date
March 15, 2016
Published Date
October 14, 2016
Last Updated
February 10, 2025
Vendor
Microsoft
Product
Internet Explorer
Description
Microsoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow remote attackers to determine the existence of arbitrary files via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."
Tags
windows cisa

CVSS Scores

CVSS v3.1

6.5 - MEDIUM

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CVSS v2.0

2.6

Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N

SSVC Information

Exploitation
active
Technical Impact
partial

Exploit Status

Exploited in the Wild
Yes (2022-05-24 00:00:00 UTC) Source

References

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-118 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-126 http://www.securityfocus.com/bid/93392 http://www.securitytracker.com/id/1036992

Known Exploited Vulnerability Information

Source Added Date
CISA 2022-05-24 00:00:00 UTC

Timeline

  • CVE ID Reserved

  • CVE Published to Public

  • Added to KEVIntel