CVE-2016-3291
- EPSS 2.34%
- Veröffentlicht 14.09.2016 10:59:05
- Zuletzt bearbeitet 12.04.2025 10:46:40
Microsoft Internet Explorer 11 and Microsoft Edge mishandle cross-origin requests, which allows remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."
CVE-2016-3247
- EPSS 50.79%
- Veröffentlicht 14.09.2016 10:59:04
- Zuletzt bearbeitet 12.04.2025 10:46:40
Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."
CVE-2016-7153
- EPSS 2.28%
- Veröffentlicht 06.09.2016 10:59:01
- Zuletzt bearbeitet 12.04.2025 10:46:40
The HTTP/2 protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-pa...
CVE-2016-7152
- EPSS 2.28%
- Veröffentlicht 06.09.2016 10:59:00
- Zuletzt bearbeitet 12.04.2025 10:46:40
The HTTPS protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-par...
CVE-2016-3329
- EPSS 32.71%
- Veröffentlicht 09.08.2016 21:59:33
- Zuletzt bearbeitet 12.04.2025 10:46:40
Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to determine the existence of files via a crafted webpage, aka "Internet Explorer Information Disclosure Vulnerability."
CVE-2016-3327
- EPSS 32.71%
- Veröffentlicht 09.08.2016 21:59:32
- Zuletzt bearbeitet 12.04.2025 10:46:40
Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to obtain sensitive information via a crafted web page, aka "Microsoft Browser Information Disclosure Vulnerability," a different vulnerability than CVE-2016-3326.
CVE-2016-3326
- EPSS 17.41%
- Veröffentlicht 09.08.2016 21:59:30
- Zuletzt bearbeitet 12.04.2025 10:46:40
Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to obtain sensitive information via a crafted web page, aka "Microsoft Browser Information Disclosure Vulnerability," a different vulnerability than CVE-2016-3327.
CVE-2016-3322
- EPSS 23.93%
- Veröffentlicht 09.08.2016 21:59:29
- Zuletzt bearbeitet 12.04.2025 10:46:40
Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3289.
CVE-2016-3321
- EPSS 29.81%
- Veröffentlicht 09.08.2016 21:59:28
- Zuletzt bearbeitet 12.04.2025 10:46:40
Microsoft Internet Explorer 10 and 11 load different files for attempts to open a file:// URL depending on whether the file exists, which allows local users to enumerate files via vectors involving a file:// URL and an HTML5 sandbox iframe, aka "Inte...
CVE-2016-3293
- EPSS 31.8%
- Veröffentlicht 09.08.2016 21:59:06
- Zuletzt bearbeitet 12.04.2025 10:46:40
Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Browser Memory Corruption Vulnerability."