CVE-2016-3277

EUVD-2016-4310
Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 96%
Affected Products (NVD)
VendorProductVersion
microsoftedge
-
𝑥
= Vulnerable software versions
Windows Releases
Platform
Version
Windows 10
(x64, x86)
KB3163912
1511 (x64, x86)
KB3172985
Windows 8.1
(x64, x86)
KB3170106
Windows RT 8.1
All
KB3170106
Windows Server 2012
Standard
KB3170106
Windows Server 2012 R2
Standard
KB3170106
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/91596
http://www.securitytracker.com/id/1036283
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-084
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-085
http://www.securityfocus.com/bid/91596
http://www.securitytracker.com/id/1036283
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-084
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-085