CVE-2016-0162

An information disclosure vulnerability in Internet Explorer allowed attackers to detect specific files on a user's computer.

Internet Explorer's failure to properly handle JavaScript led to an information disclosure vulnerability, enabling attackers to detect specific files on a user's computer. DIB organizations must care because Internet Explorer is end-of-life and unsupported, with a catastrophic security track record of critical and high-severity vulnerabilities. Organizations should ensure all legacy systems are patched or replaced to avoid exposure to known, unpatched CVEs that are actively exploited in the wild.

Shame score — The vulnerability was in an end-of-life, unsupported product with a known catastrophic security track record, and the flaw was actively exploited in the wild (KEV), indicating negligence in maintaining secure, supported software.