High severity7.5NVD Advisory· Published Jul 13, 2016· Updated May 6, 2026

CVE-2016-3255

Description

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka ".NET Information Disclosure Vulnerability."

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.securityfocus.com/bid/91601nvd
www.securitytracker.com/id/1036291nvd
docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-091nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.024
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000