CVE-2016-3298

unknown KEV

Published 2022-05-24 · Modified 2022-05-24

CVSS v3

—

CVSS v2

—

VIR risk

1.5

Description

An information disclosure vulnerability exists when the Microsoft Internet Messaging API improperly handles objects in memory. An attacker who successfully exploited this vulnerability could allow the attacker to test for the presence of files on disk.

CISA KEV

Vendor: Microsoft
Product: Internet Explorer
Due date: 2022-06-14

Predictions

Exploit likelihood

99%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: cisa-kev — https://nvd.nist.gov/vuln/detail/CVE-2016-3298

Exploits

References

https://nvd.nist.gov/vuln/detail/CVE-2016-3298

Verify integrity in audit chain (admin only). AS-IS.