VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Dec 20, 2016· Updated Jun 17, 2026

CVE-2016-7282

CVE-2016-7282

Description

Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Microsoft Browser Information Disclosure Vulnerability."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Microsoft/Edge2 versions
    cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*
    • (no CPE)
  • Microsoft/Internet Explorer4 versions
    cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*
    • (no CPE)range: 9-11

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.