VULNERABILITY INTELLIGENCE
CVE-2016-3292
CVSS score5 MEDIUM
EPSS probability7.11%
CISA KEVNot currently listed
Published2016-09-14
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
Description
Microsoft Internet Explorer 10 and 11 mishandles integrity settings and zone settings, which allows remote attackers to bypass a sandbox protection mechanism via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability."
Weakness classification
- CWE-20: Improper Input Validation