CVE-2016-3351

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

Microsoft Internet Explorer 9 through 11 and Microsoft Edge are affected by an information disclosure vulnerability tracked as CVE-2016-3351. The flaw permits remote attackers to obtain sensitive information from a victim by serving a specially crafted web site, as described in the NVD entry with a CVSS 3.1 base score of 6.5 reflecting network attack vector, low complexity, no required privileges, and required user interaction.

An unauthenticated remote attacker can exploit the issue by convincing a user to visit a malicious web page under the attacker's control. Successful exploitation results in disclosure of sensitive browser or system information while leaving integrity and availability unaffected.

Microsoft addressed the vulnerability through security bulletins MS16-104 and MS16-105, which are referenced in the available advisories along with related tracking entries on SecurityFocus and SecurityTracker. No further details on exploitation in the wild or additional mitigations are provided in the source data.