CVE-2016-7204HighCVSS 4.3

Microsoft Edge Information Disclosure Vulnerability

Published
November 8, 2016
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2016-7204 →

📋 Description

An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory. An attacker who successfully exploited this vulnerability could trick a user into allowing access to the user’s My Documents folder. For an attack to be successful, an attacker must persuade a user to open a malicious website. The update addresses the vulnerability by changing how Microsoft Edge handles objects in memory.

🎯 Affected products7

  • Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for 32-bit Systems
  • Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for x64-based Systems
  • Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems
  • Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems
  • Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems
  • Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems
  • Microsoft Edge (EdgeHTML-based) on Windows Server 2016

✅ Remediation

KB3198585 (Security Update) KB3198586 (Security Update) KB3200970 (Security Update)

🔗 References (4)