Lucene search

MicrosoftCVE-2016-3327

HistoryAug 09, 2016 - 9:59 p.m.

CVE-2016-3327

2016-08-0921:59:32

CWE-200

microsoft

web.nvd.nist.gov

microsoft

internet explorer

edge

cve

vulnerability

information disclosure

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

AI Score

5.1

Confidence

High

EPSS

0.486

Percentile

97.6%

JSON

Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to obtain sensitive information via a crafted web page, aka “Microsoft Browser Information Disclosure Vulnerability,” a different vulnerability than CVE-2016-3326.

Affected configurations

Nvd

Node

microsoftedge

microsoftinternet_explorerMatch9

microsoftinternet_explorerMatch10

microsoftinternet_explorerMatch11

VendorProductVersionCPE
microsoftedge*cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*
microsoftinternet_explorer9cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*
microsoftinternet_explorer10cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*
microsoftinternet_explorer11cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	edge	*	cpe:2.3:a:microsoft:edge::::::::
microsoft	internet_explorer	9	cpe:2.3:a:microsoft:internet_explorer:9:::::::*
microsoft	internet_explorer	10	cpe:2.3:a:microsoft:internet_explorer:10:::::::*
microsoft	internet_explorer	11	cpe:2.3:a:microsoft:internet_explorer:11:::::::*