CVE-2016-3321
—CVSS 3.0
2.5 low
EPSS
35%p98
Published
()
Modified
Description
Microsoft Internet Explorer 10 and 11 load different files for attempts to open a file:// URL depending on whether the file exists, which allows local users to enumerate files via vectors involving a file:// URL and an HTML5 sandbox iframe, aka "Internet Explorer Information Disclosure Vulnerability."
- Vendors
- microsoft
- Products
- internet explorer
- Weakness
- CWE-200
- Vector
- CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
In the news0 stories
No ingested article mentions this CVE yet.