Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
s/security-updates/securitybulletins/2016/ms16-104 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105 - http://www.securitytracker.com/id/1036788
CVE ID: CVE-2016-3292 State: PUBLISHED Published: 2016-09-14T10:00:00 Last Updated: 2024-08-05T23:47:58.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 10 and 11 mishandles integrity settings and zone settings, which allows remote attackers to bypass a sandbox protection mechanism via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92808 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-104 - http://www.securitytracker.com/id/1036788
CVE ID: CVE-2016-3293 State: PUBLISHED Published: 2016-08-09T21:00:00 Last Updated: 2024-08-05T23:47:58.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Browser Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-095 - http://www.securitytracker.com/id/1036562 - http://www.securityfocus.com/bid/92305 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-096
CVE ID: CVE-2016-3294 State: PUBLISHED Published: 2016-09-14T10:00:00 Last Updated: 2024-08-05T23:47:59.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3330. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036789 - http://www.securityfocus.com/bid/92789 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105
CVE ID: CVE-2016-3295 State: PUBLISHED Published: 2016-09-14T10:00:00 Last Updated: 2024-08-05T23:47:58.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036789 - http://www.securityfocus.com/bid/92830 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-104 - https://docs.microsoft.com/en-us/security-updates/securitybull
/en-us/security-updates/securitybulletins/2016/ms16-104 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105 - http://www.securitytracker.com/id/1036788
CVE ID: CVE-2016-3296 State: PUBLISHED Published: 2016-08-09T21:00:00 Last Updated: 2024-08-05T23:47:59.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92283 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-096 - http://www.securitytracker.com/id/1036569
CVE ID: CVE-2016-3297 State: PUBLISHED Published: 2016-09-14T10:00:00 Last Updated: 2024-08-05T23:47:58.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036789 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-104 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105 - http://www.secur
ins/2016/ms16-104 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105 - http://www.securityfocus.com/bid/92829 - http://www.securitytracker.com/id/1036788
CVE ID: CVE-2016-3298 State: PUBLISHED Published: 2016-10-14T01:00:00.000Z Last Updated: 2025-10-21T23:55:49.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow remote attackers to determine the existence of arbitrary files via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-118 - https://docs.microsoft.com/en-us/security-updates/
icrosoft.com/en-us/security-updates/securitybulletins/2016/ms16-118 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-126 - http://www.securityfocus.com/bid/93392 - http://www.securitytracker.com/id/1036992
CVE ID: CVE-2016-3299 State: PUBLISHED Published: 2016-08-09T21:00:00 Last Updated: 2024-08-05T23:47:58.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow remote attackers to hijack network traffic or bypass intended Enhanced Protected Mode (EPM) or application container protection mechanisms, and consequently render untrusted content in a browser, by leveraging how NetBIOS validates responses, aka "NetBIOS Spoofing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://d
ponses, aka "NetBIOS Spoofing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-077 - http://www.securityfocus.com/bid/92387
CVE ID: CVE-2016-3300 State: PUBLISHED Published: 2016-08-09T21:00:00 Last Updated: 2024-08-05T23:47:58.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Netlogon service in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1 improperly establishes secure communications channels, which allows local users to gain privileges by leveraging access to a domain-joined machine, aka "Netlogon Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92296 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-101 - http://www.securitytracker.com/id/1036576
CVE ID: CVE-2016-3301 State: PUBLISHED Published: 2016-08-09T21:00:00 Last Updated: 2024-08-05T23:47:58.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; and Live Meeting 2007 Console allows remote attackers to execute arbitrary code via a crafted embedded font, aka "Windows Graphics Component RCE Vulnerability." Additional Analyst Notes: - CVE Program Container:
ed embedded font, aka "Windows Graphics Component RCE Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92288 - https://www.exploit-db.com/exploits/40255/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-097 - http://www.securitytracker.com/id/1036564
CVE ID: CVE-2016-3302 State: PUBLISHED Published: 2016-09-14T10:00:00 Last Updated: 2024-08-05T23:47:58.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607, when the lock screen is enabled, do not properly restrict the loading of web content, which allows physically proximate attackers to execute arbitrary code via a (1) crafted Wi-Fi access point or (2) crafted mobile-broadband device, aka "Windows Lock Screen Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/20
yst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-112 - http://www.securityfocus.com/bid/92853 - http://www.securitytracker.com/id/1036799
CVE ID: CVE-2016-3303 State: PUBLISHED Published: 2016-08-09T21:00:00 Last Updated: 2024-08-05T23:47:59.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2013 SP1, Lync 2010, Lync 2010 Attendee, and Live Meeting 2007 Console allows remote attackers to execute arbitrary code via a crafted embedded font, aka "Windows Graphics Component RCE Vulnerability," a different vulnerability than CVE-2016-3304. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploit
than CVE-2016-3304. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/40256/ - http://www.securityfocus.com/bid/92301 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-097 - http://www.securitytracker.com/id/1036564
CVE ID: CVE-2016-3304 State: PUBLISHED Published: 2016-08-09T21:00:00 Last Updated: 2024-08-05T23:47:59.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2013 SP1, Lync 2010, Lync 2010 Attendee, and Live Meeting 2007 Console allows remote attackers to execute arbitrary code via a crafted embedded font, aka "Windows Graphics Component RCE Vulnerability," a different vulnerability than CVE-2016-3303. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9
than CVE-2016-3303. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92302 - https://www.exploit-db.com/exploits/40257/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-097 - http://www.securitytracker.com/id/1036564
CVE ID: CVE-2016-3305 State: PUBLISHED Published: 2016-09-14T10:00:00 Last Updated: 2024-08-05T23:47:59.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 mishandles session objects, which allows local users to hijack sessions, and consequently gain privileges, via a crafted application, aka "Windows Session Object Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3306. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/e
bility than CVE-2016-3306. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-111 - http://www.securitytracker.com/id/1036802 - http://www.securityfocus.com/bid/92812
CVE ID: CVE-2016-3306 State: PUBLISHED Published: 2016-09-14T10:00:00 Last Updated: 2024-08-05T23:47:59.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 mishandles session objects, which allows local users to hijack sessions, and consequently gain privileges, via a crafted application, aka "Windows Session Object Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3305. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/e
bility than CVE-2016-3305. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-111 - http://www.securitytracker.com/id/1036802 - http://www.securityfocus.com/bid/92813
CVE ID: CVE-2016-3307 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-3308 State: PUBLISHED Published: 2016-08-09T21:00:00 Last Updated: 2024-08-05T23:47:59.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3309, CVE-2016-3310, and CVE-2016-3311. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/55-AA/CVE-2016-3308 - https://docs.microsoft.com
nalyst Notes: - CVE Program Container: References: - https://github.com/55-AA/CVE-2016-3308 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-098 - http://www.securityfocus.com/bid/92295 - http://www.securitytracker.com/id/1036572
CVE ID: CVE-2016-3309 State: PUBLISHED Published: 2016-08-09T21:00:00.000Z Last Updated: 2025-10-21T23:55:50.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3308, CVE-2016-3310, and CVE-2016-3311. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.microsoft.com/en-us/secu
nal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-098 - https://www.exploit-db.com/exploits/42960/ - http://www.securitytracker.com/id/1036572 - http://www.securityfocus.com/bid/92297
CVE ID: CVE-2016-3310 State: PUBLISHED Published: 2016-08-09T21:00:00 Last Updated: 2024-08-05T23:47:58.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3308, CVE-2016-3309, and CVE-2016-3311. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92298 - https://docs.microsoft.com
nalyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92298 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-098 - http://www.securitytracker.com/id/1036572 - https://blog.fortinet.com/2016/08/17/root-cause-analysis-of-windows-kernel-uaf-vulnerability-lead-to-cve-2016-3310
CVE ID: CVE-2016-3311 State: PUBLISHED Published: 2016-08-09T21:00:00 Last Updated: 2024-08-05T23:47:59.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3308, CVE-2016-3309, and CVE-2016-3310. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins
nalyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-098 - http://www.securityfocus.com/bid/92299 - http://www.securitytracker.com/id/1036572
CVE ID: CVE-2016-3312 State: PUBLISHED Published: 2016-08-09T21:00:00 Last Updated: 2024-08-05T23:47:59.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: ActiveSyncProvider in Microsoft Windows 10 Gold and 1511 allows attackers to discover credentials by leveraging failure of Universal Outlook to obtain a secure connection, aka "Universal Outlook Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036577 - http://www.securityfocus.com/bid/92307 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-103
CVE ID: CVE-2016-3313 State: PUBLISHED Published: 2016-08-09T21:00:00 Last Updated: 2024-08-05T23:47:59.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016, Word 2016 for Mac, and Word Viewer allow remote attackers to execute arbitrary code via a crafted file, aka "Microsoft Office Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036559 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-099 - https://www.exploit-db.com/exploits/40224/ - http://www.securityfocus.com/bid/92289
CVE ID: CVE-2016-3314 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-3315 State: PUBLISHED Published: 2016-08-09T21:00:00 Last Updated: 2024-08-05T23:47:59.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft OneNote 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to obtain sensitive information via a crafted OneNote file, aka "Microsoft OneNote Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036559 - http://www.securityfocus.com/bid/92294 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-099
CVE ID: CVE-2016-3316 State: PUBLISHED Published: 2016-08-09T21:00:00 Last Updated: 2024-08-05T23:47:59.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to execute arbitrary code via a crafted file, aka "Microsoft Office Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036559 - http://www.securityfocus.com/bid/92300 - https://www.exploit-db.com/exploits/40238/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-099
CVE ID: CVE-2016-3317 State: PUBLISHED Published: 2016-08-09T21:00:00 Last Updated: 2024-08-05T23:47:58.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office 2010 SP2, Word 2007 SP3, Word 2010 SP2, Word for Mac 2011, Word 2016 for Mac, and Word Viewer allow remote attackers to execute arbitrary code via a crafted file, aka "Microsoft Office Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036559 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-099 - http://www.securityfocus.com/bid/92303
CVE ID: CVE-2016-3318 State: PUBLISHED Published: 2016-08-09T21:00:00 Last Updated: 2024-08-05T23:47:58.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allow remote attackers to execute arbitrary code via a crafted file, aka "Graphics Component Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036559 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-099 - http://www.securityfocus.com/bid/92308
CVE ID: CVE-2016-3319 State: PUBLISHED Published: 2016-08-09T21:00:00 Last Updated: 2024-08-05T23:47:58.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PDF library in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allows remote attackers to execute arbitrary code via a crafted PDF file, aka "Microsoft PDF Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036561 - http://www.securityfocus.com/bid/92293 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-096 - https://docs.microsoft.com/en-us/security-updat
s.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-096 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-102
CVE ID: CVE-2016-3320 State: PUBLISHED Published: 2016-08-09T21:00:00 Last Updated: 2024-08-05T23:47:58.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow attackers to bypass the Secure Boot protection mechanism by leveraging (1) administrative or (2) physical access to install a crafted boot manager, aka "Secure Boot Security Feature Bypass." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92304 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-100 - http://www.securitytracker.com/id/1036573 -
docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-100 - http://www.securitytracker.com/id/1036573 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MVB6Y2TVKSOBTIIBRUAJUIH3LQHMHCAG/
CVE ID: CVE-2016-3321 State: PUBLISHED Published: 2016-08-09T21:00:00 Last Updated: 2024-08-05T23:47:59.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 10 and 11 load different files for attempts to open a file:// URL depending on whether the file exists, which allows local users to enumerate files via vectors involving a file:// URL and an HTML5 sandbox iframe, aka "Internet Explorer Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-095 - http://www.securitytracker.com/id/1036562 - https://www.securify.nl/advisory/SFY
dates/securitybulletins/2016/ms16-095 - http://www.securitytracker.com/id/1036562 - https://www.securify.nl/advisory/SFY20160301/internet_explorer_iframe_sandbox_local_file_name_disclosure_vulnerability.html - http://seclists.org/fulldisclosure/2016/Aug/44 - http://www.securityfocus.com/archive/1/539174/100/0/threaded - http://www.securityfocus.com/bid/92291