CVE-2016-0162
Microsoft Internet Explorer Information Disclosure Vulnerability
Published Apr 12, 2016 · updated Jun 16, 2026 · microsoft internet explorer
An information disclosure vulnerability exists when Internet Explorer does not properly handle JavaScript. The vulnerability could allow an attacker to detect specific files on the user's computer.
Timeline
Detection, updates, and resolution for this record.
Apr 12, 2016 · Catalog
Detected
An information disclosure vulnerability exists when Internet Explorer does not properly handle JavaScript. The vulnerability could allow an attacker to detect specific files on the user's computer.
May 24, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Jun 14, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
An information disclosure vulnerability exists when Internet Explorer does not properly handle JavaScript. The vulnerability could allow an attacker to detect specific files on the user's computer.
Required action
Apply updates per vendor instructions.
CISA due date Jun 14, 2022
Affected
- cpe microsoft/internet explorer10
- cpe microsoft/internet explorer11
- cpe microsoft/internet explorer9
- vendor Microsoft Internet Explorerversion unspecified
Sources
- CISA KEVCVE-2016-0162
An information disclosure vulnerability exists when Internet Explorer does not properly handle JavaScript. The vulnerability could allow an attacker to detect specific files on the user's computer.
cisa.gov - CVE.orgCVE-2016-0162
Official CVE identifier
cve.org - FIRST EPSSCVE-2016-0162
30-day exploitation probability 22.0%
first.org - NIST NVDCVE-2016-0162
Microsoft Internet Explorer 9 through 11 allows remote attackers to determine the existence of files via crafted JavaScript code, aka "Internet Explorer Information Disclosure Vulnerability."
nvd.nist.gov