Information disclosure

Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to obtain sensitive information via a crafted web page, aka "Microsoft Browser Information Disclosure Vulnerability," a different vulnerability than CVE-2016-3326...

Microsoft Releases 9 Security Updates to Patch 34 Vulnerabilities

In Brief Microsoft's August Patch Tuesday offers nine security bulletins with five rated critical, resolving 34 security vulnerabilities in Internet Explorer IE, Edge, and Office, as well as some serious high-profile security issues with Windows. A security bulletin, MS16-102, patches a single...

CVE-2016-3321

Microsoft Internet Explorer 10 and 11 load different files for attempts to open a file:// URL depending on whether the file exists, which allows local users to enumerate files via vectors involving a file:// URL and an HTML5 sandbox iframe, aka "Internet Explorer Information Disclosure...

CVE-2016-3321

CVE-2016-3321 affects Microsoft Internet Explorer 10 and 11. The issue arises because IE loads different files for file:// URLs depending on whether the target file exists, which can be exploited when used with an HTML5 sandbox iframe to enumerate local files. The vulnerability is described as an...

CVE-2016-3293

CVE-2016-3293 corresponds to a memory corruption vulnerability in Microsoft browsers described as the Microsoft Browser Memory Corruption Vulnerability, affecting Internet Explorer 9–11 and Microsoft Edge. The connected documents confirm a remote-code-execution risk when a user visits a crafted w...

CVE-2016-3329

Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to determine the existence of files via a crafted webpage, aka "Internet Explorer Information Disclosure Vulnerability."...

CVE-2016-3329

CVE-2016-3329 affects Internet Explorer 9–11 and Microsoft Edge. It is an information-disclosure flaw where a crafted webpage can reveal the existence of files on the user’s system. Root cause relates to how browsers handle memory objects/page content, enabling an attacker to infer file presence....

CVE-2016-3326

Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to obtain sensitive information via a crafted web page, aka "Microsoft Browser Information Disclosure Vulnerability," a different vulnerability than CVE-2016-3327...

CVE-2016-3290

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code via a crafted web page, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3288...

CVE-2016-3322

Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3289...

CVE-2016-3288

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code via a crafted web page, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3290...

CVE-2016-3289

CVE-2016-3289 affects Microsoft Internet Explorer 11 and Microsoft Edge. The issue is a memory corruption vulnerability in the browser when handling memory objects, which an attacker can exploit via a crafted webpage to achieve remote code execution or a denial of service. Connected CNVD entries ...

CVE-2016-3288

CVE-2016-3288 affects Microsoft Internet Explorer 11. It is a memory corruption vulnerability in IE11 that can be triggered by visiting a crafted webpage, enabling remote code execution. Multiple sources confirm exploitation exists (e.g., exploit-db entry for CVE-2016-3288). The issue is distinct...

CVE-2016-3326

CVE-2016-3326 is an information-disclosure vulnerability affecting Microsoft Internet Explorer (IE9–IE11) and Edge, arising from how the browser handles objects in memory when processing crafted web content. The issue could allow remote attackers to obtain sensitive data via a malicious page. Aff...

CVE-2016-3290

Technical details for CVE-2016-3290 are not provided in the supplied documents. Public details about affected components, impact, or fixes are not available here; monitor for updates from authoritative sources.

CVE-2016-3322

CVE-2016-3322 affects Internet Explorer 11 and Edge, described as a memory corruption vulnerability that can allow remote code execution when a user visits a crafted webpage. Connected sources corroborate a memory corruption flaw in Microsoft Edge/IE causing remote code execution, with CNVD-2016-...

CVE-2016-3327

Technical details for CVE-2016-3327 are not publicly available in the provided connected documents. They list the CVE among IE/Edge updates but do not specify affected products, root cause, impact, or fixes. Monitor for updates.

CVE-2016-3293

Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Browser Memory Corruption Vulnerability."...

CVE-2016-3327

Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to obtain sensitive information via a crafted web page, aka "Microsoft Browser Information Disclosure Vulnerability," a different vulnerability than CVE-2016-3326...

Cumulative Security Update for Internet Explorer 10 for Windows Embedded 8 Standard for x64-based Systems (KB3175443)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...