Cyber Resilience

CVE-2016-3213

Microsoft Internet Explorer 10 … 9

High EPSS
Published
16 June 2016
Modified
06 May 2026
CVSS Score v3 8.8
Click a component to see what it means
Raw vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score 0.67 99.2th percentile
Risk Priority 90 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2016-3213 is a high-severity an unspecified weakness vulnerability in Microsoft Internet Explorer. Its CVSS base score is 8.8 (High).

Operationally, ranked in the top 0.8% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold and 1511, and…

more

Internet Explorer 9 through 11 has an improper fallback mechanism, which allows remote attackers to gain privileges via NetBIOS name responses, aka "WPAD Elevation of Privilege Vulnerability."

CWE(s)
CWE-264

Related Threats

CVEs Like This One

CVE-2015-1769Same product: Microsoft Windows 10
CVE-2016-3236Same product: Microsoft Windows 10
CVE-2015-2425Same product: Microsoft Internet Explorer
CVE-2015-2502Same product: Microsoft Internet Explorer
CVE-2016-0162Same product: Microsoft Internet Explorer
CVE-2015-0071Same product: Microsoft Internet Explorer
CVE-2015-2426Same product: Microsoft Windows 10
CVE-2017-11771Same product: Microsoft Windows 10
CVE-2014-4123Same product: Microsoft Internet Explorer
CVE-2013-3897Same product: Microsoft Internet Explorer

Affected Assets

microsoft
internet explorer
10, 11, 9
microsoft
windows 10
1511, all versions
microsoft
windows 7
all versions
microsoft
windows 8.1
all versions
microsoft
windows rt 8.1
all versions
microsoft
windows server 2008
all versions, r2
microsoft
windows server 2012
all versions, r2
microsoft
windows vista
all versions

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References