CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 2.5. It affects Microsoft. Its EPSS score suggests a 35.3% probability of exploitation in the next 30 days.
CVE
CVE-2016-3321
Severity
LOW
CVSS
2.5
EPSS
35.33%
Microsoft
Original NVD Description
Microsoft Internet Explorer 10 and 11 load different files for attempts to open a file:// URL depending on whether the file exists, which allows local users to enumerate files via vectors involving a file:// URL and an HTML5 sandbox iframe, aka "Internet Explorer Information Disclosure Vulnerability."