CVE-2016-7227

The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to determine the existence of local files via unspecified vectors, aka "Microsoft Browser Information Disclosure Vulnerability."

Score

CVSS 3.0 3.1 Low

Status

Modified - secure@microsoft.com

Published

2016-11-10

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Edge (Microsoft)
• Internet Explorer (Microsoft)

References

• http://www.securityfocus.com/bid/94065
• http://www.securitytracker.com/id/1037245
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-129
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-142