Exposures › CVE-2016-0162

CVE-2016-0162

Severity

high · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2022-05-24

Reference

https://nvd.nist.gov/vuln/detail/CVE-2016-0162

⌖ exploited in the wild shame 50/100 exploited-in-wild

An information disclosure vulnerability exists when Internet Explorer does not properly handle JavaScript. The vulnerability could allow an attacker to detect specific files on the user's computer.

Players implicated

Microsoft · vendor Internet Explorer · product

Description

An information disclosure vulnerability exists when Internet Explorer does not properly handle JavaScript. The vulnerability could allow an attacker to detect specific files on the user's computer.

Affected FedRAMP products 4 in the catalog

Product	Provider	Status	Match
Azure Commercial Cloud	Microsoft	Authorized	vendor-exact · 0.90
Azure Government (includes Dynamics 365)	Microsoft	Authorized	vendor-exact · 0.90
Microsoft Office 365 GCC High	Microsoft	In Process	vendor-exact · 0.90
Office 365 Multi-Tenant & Supporting Services	Microsoft	Authorized	vendor-exact · 0.90