Vendor / Project: Microsoft Product: Internet Explorer Description: An information disclosure vulnerability exists when the Microsoft Internet Messaging API improperly handles objects in memory. An attacker who successfully exploited this vulnerability could allow the attacker to test for the presence of files on disk. Required Action: Apply updates per vendor instructions. Due Date: 2022-06-14 Ransomware Campaign Use: Unknown CWEs: CWE-200 Notes: https://nvd.nist.gov/vuln/detail/CVE-2016-3298
CVE-2016-3298 — Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2022-05-24 00:00 UTC
- Importiert: 2026-10-20 22:46 UTC
- CVSS: 6.5
- Quelle-ID:
cisa_kev - uid_hash:
74338159db2bc3ed8c2e5d888e6708358cc92896eb94b826296aadbe4b75e8aa
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
MEDIUM |
6.5 |
MEDIUM |
6.5 |
2016-10-14 |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CISA – Known Exploited Vulnerabilities (KEV) | threat_intel | cisa, kev | - | de | https://raw.githubusercontent.com/cisagov/kev-data/develop/known_exploited_vulnerabilities.json |