Vulnerability Analysis

CVE-2016-3351

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."

CISA KEV SSVC: Active Exploitation

CVSS Base Score

6.5

MEDIUM

Exploitability:2.9

Impact Score:3.6

Temporal Score:-

EPSS:26.29%

Threat Intelligence Signals

CISA KEV

YES

KEV Date Added

2022-05-24

Ransomware Use

Known

KEV Due Date

2022-06-14

VulnCheck In-the-Wild

Nuclei Template

EPSS Score

26.286%

EPSS Percentile

97.8th pct

GHSA ID

GHSA-p53p-2wmf-238v ↗

GitHub Severity

LOW

SSVC Exploitation

Active

SSVC Automatable

Vulnerability Class

—

CVSS Vector Details

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality

Integrity

Availability

Identity & Timeline

Status	-
Assigning Authority	-
CVSS Version / Source	-
Reserved	-
Published	-
Patch Date (date_public)	-
Exploit DB Date	-
First GitHub PoC Date	-
Last Updated	-
Time to Patch (Days to fix)	-
Exploit Release Gap	-
PoC Release Gap	-
Exploit DB References	None identified

Weaknesses (CWE)

CISA SSVC Prioritization

MITRE ATT&CK Mapping

Tactics

Techniques

Exploitation & Remediation

Affected Products & Versions

Vendor	Product	Affected Versions
No affected products specified.

References

NVD Listing ↗ MITRE Listing ↗

No reference links found.