CVE-2016-3298

KEV

Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability

Vendor / Project: Microsoft
Product: Internet Explorer
Date added: May 24, 2022
Due date: Jun 14, 2022
Known ransomware use: Unknown
CWEs: CWE-200

Description

An information disclosure vulnerability exists when the Microsoft Internet Messaging API improperly handles objects in memory. An attacker who successfully exploited this vulnerability could allow the attacker to test for the presence of files on disk.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2016-3298