ZeroDay Findings
Sign inSign up

Findings

CVE-2016-3351

Microsoft Internet Explorer and Edge Information Disclosure Vulnerability

Published Sep 14, 2016 · updated Aug 13, 2026 · microsoft internet explorer

An information disclosure vulnerability exists in the way that certain functions in Internet Explorer and Edge handle objects in memory. The vulnerability could allow an attacker to detect specific files on the user's computer.

Timeline

Detection, updates, and resolution for this record.

  1. Sep 14, 2016 · Catalog

    Detected

    An information disclosure vulnerability exists in the way that certain functions in Internet Explorer and Edge handle objects in memory. The vulnerability could allow an attacker to detect specific files on the user's computer.

  2. May 24, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Jun 14, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Aug 13, 2026 · Catalog

    Updated

    An information disclosure vulnerability exists in the way that certain functions in Internet Explorer and Edge handle objects in memory. The vulnerability could allow an attacker to detect specific files on the user's computer.

Required action

Apply updates per vendor instructions.

CISA due date Jun 14, 2022

Affected

  • cpe microsoft/edgeversion unspecified
  • cpe microsoft/internet explorer10
  • cpe microsoft/internet explorer11
  • cpe microsoft/internet explorer9
  • vendor Microsoft Internet Explorer and Edgeversion unspecified

Sources

  • CISA KEVCVE-2016-3351

    An information disclosure vulnerability exists in the way that certain functions in Internet Explorer and Edge handle objects in memory. The vulnerability could allow an attacker to detect specific files on the user's computer.

    cisa.gov
  • CVE.orgCVE-2016-3351

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2016-3351

    30-day exploitation probability 26.5%

    first.org
  • NIST NVDCVE-2016-3351

    Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."

    nvd.nist.gov

References