VULNERABILITY INTELLIGENCE

CVE-2016-7199

CVSS score3.1 LOW

EPSS probability13.09%

CISA KEVNot currently listed

Published2016-11-10

Last modified2026-06-17

Description

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to bypass the Same Origin Policy and obtain sensitive window-state information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."