Skip to content

CVE-2016-0162 Microsoft Internet Explorer 9 through 11 allows remote attackers to determine the existence of files via crafted JavaScript code, aka "Internet Explorer Information Disclosure Vulnerability."

MediumCVSS 4.3 EPSS 21.9% CISA KEV added 2022-05-24 · due 2022-06-14 Exploited in the wild
Published
Updated
Exploit status
Exploited in the wild (confirmed)
Sign in for asset impact Search another CVE

Description

Microsoft Internet Explorer 9 through 11 allows remote attackers to determine the existence of files via crafted JavaScript code, aka "Internet Explorer Information Disclosure Vulnerability."

CISA Known Exploited Vulnerability

Date added
2022-05-24
Due date (FCEB)
2022-06-14
Ransomware use
Unknown

Required action

Apply updates per vendor instructions.

Affected products

ProductAffected versionsFixed in
Microsoft internet explorer = 9 No fix listed
Microsoft internet explorer = 10 No fix listed
Microsoft internet explorer = 11 No fix listed

References

  • 85939 broken-link third-party-advisory vdb-entry
  • 1035521 broken-link third-party-advisory vdb-entry
  • MS16-037 patch vendor-advisory
  • www.cisa.gov government-resource us-government-resource