CVE-2016-3255

🗓️ 13 Jul 2016 01:00:00Reported by microsoftType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 89 Views

CVE-2016-3255: XML External Entity (XXE) issue in Microsoft .NET Framewor

Reporter	Title	Published	Views	Family All 24
BDU FSTEC	The vulnerability of the Microsoft .NET Framework software platform, which allows a hacker to read arbitrary files	16 Aug 201600:00	–	bdu_fstec
CNVD	Microsoft .NET Framework Information Disclosure Vulnerability (CNVD-2016-04935)	14 Jul 201600:00	–	cnvd
Cvelist	CVE-2016-3255	13 Jul 201601:00	–	cvelist
Microsoft KB	Security update 2016-07-12	12 Jul 201607:00	–	mskb
Microsoft KB	MS16-091: Description of the security update for the .NET Framework 3.5.1 in Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: July 12, 2016	12 Jul 201607:00	–	mskb
Microsoft KB	MS16-091: Description of the security update for the .NET Framework 3.5 in Windows Server 2012: July 12, 2016	12 Jul 201607:00	–	mskb
Microsoft KB	MS16-091: Description of the security update for the .NET Framework 3.5 in Windows 8.1 and Windows Server 2012 R2: July 12, 2016	12 Jul 201607:00	–	mskb
Microsoft KB	MS16-091: Description of the security update for the .NET Framework 4.5.2 in Windows Server 2012: July 12, 2016	12 Jul 201607:00	–	mskb
Microsoft KB	MS16-091: Description of the security update for the .NET Framework 4.5.2 in Windows Vista Service Pack 2, Windows Server 2008 Service Pack 2, Windows 7 Service Pack 1, and Windows Server 2008 R2 Service Pack 1: July 12, 2016	12 Jul 201607:00	–	mskb
Microsoft KB	MS16-091: Description of the security update for the .NET Framework 4.5.2 in Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: July 12, 2016	12 Jul 201607:00	–	mskb

NVD

Node

Source	Link
securityfocus	www.securityfocus.com/bid/91601
securitytracker	www.securitytracker.com/id/1036291
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-091

17 Jun 2026 00:45Current

7High risk

Vulners AI Score7

CVSS 25

CVSS 37.5

EPSS0.24665