Live › vulnerability › CVE-2016-3351
Go to dashboardA memory-handling flaw in certain Internet Explorer and Edge functions lets a web page detect whether specific files exist on the visitor's computer. Attackers get file-presence information, not file contents, and CISA lists it as actively exploited.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Microsoft Internet Explorer and Edge | vendor | – | – |
Check whether Internet Explorer or Edge (legacy) is installed and on a version older than the Microsoft 2016 security update: run winver or check Apps and Features.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An information disclosure vulnerability exists in the way that certain functions in Internet Explorer and Edge handle objects in memory. The vulnerability could allow an attacker to detect specific files on the user's computer.
CISA required action: Apply updates per vendor instructions.
This page as .md · .json · in your agent: get_signal("CVE-2016-3351")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.