CVE-2016-3325: Microsoft IE and Edge browser information disclosure via crafted website

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 20 September 2026. Confidence: medium.

medium priorityInformation disclosure only with low confidentiality impact and required user interaction, but a public exploit and very high EPSS raise the practical risk.

What it is

Internet Explorer 11 and Microsoft Edge fail to properly handle crafted web content, allowing a remote attacker to obtain sensitive information. The flaw is an information exposure issue (CWE-200) fixed in Microsoft bulletins MS16-104 and MS16-105. It matters because browser memory or data leakage can expose user or session information to a malicious page.

Impact

An attacker who lures a user to a crafted website can read sensitive information from the browser context. The CVSS 3.0 vector rates confidentiality impact as low, so the exposure is limited rather than full system compromise.

Attack surface

Reached over the network through a crafted website rendered by IE 11 or Edge. No authentication is required, but user interaction is required because the victim must visit the page (UI:R).

Exploitation

Not listed in CISA KEV, but an Exploit-DB entry (40747) exists and EPSS is high at roughly 0.54 (99th percentile), indicating meaningful exploitation likelihood. No ransomware association is documented.

What to do

• Apply the Microsoft fixes in MS16-104 (IE) and MS16-105 (Edge) or later cumulative updates.
• Retire or restrict Internet Explorer 11 and migrate users to a supported, current browser.
• Enforce browser isolation or sandboxing for untrusted web content where feasible.
• Block or filter known malicious sites and use reputation-based web filtering.
• Keep browser and OS patch levels current and verify update compliance.

Detection

• Monitor proxy and DNS logs for access to domains tied to Exploit-DB 40747 or known exploit hosts.
• Alert on IE/Edge processes spawning unexpected child processes or making anomalous outbound connections.
• Review endpoint telemetry for browser crashes or memory-related anomalies on IE 11 and Edge.
• Correlate web access logs with endpoint events for users visiting newly registered or low-reputation sites.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.