Low severity2.4NVD Advisory· Published Sep 14, 2016· Updated Jun 17, 2026

CVE-2016-3291

Description

Microsoft Internet Explorer 11 and Microsoft Edge mishandle cross-origin requests, which allows remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Microsoft/Edge
cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*
Microsoft/Internet Explorer2 versions
cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*
- (no CPE)

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/92834nvd
www.securitytracker.com/id/1036788nvd
www.securitytracker.com/id/1036789nvd
docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-104nvd
docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105nvd

News mentions

No linked articles in our index yet.

cvss	0.156
epss	0.010
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000