CVE-2016-3374 Information disclosure in n/a
Remote attackers can obtain sensitive information via a crafted website exploiting the PDF library in Microsoft Edge and Windows.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2016-3374?
CVE-2016-3374 is a medium-severity vulnerability in Microsoft Edge, published on 14 Sep 2016. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
The PDF library in Microsoft Edge, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information via a crafted web site, aka "PDF Library Information Disclosure Vulnerability," a different vulnerability than CVE-2016-3370.
Weakness: CWE-200
Which versions are affected by CVE-2016-3374?
It affects 5 products.
Products include Microsoft Edge, Microsoft Windows 10, Microsoft Windows 8.1, Microsoft Windows Rt 8.1, Microsoft Windows Server 2012.
How do I fix CVE-2016-3374?
No fix has been published for CVE-2016-3374 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-3374 being exploited?
There is no known exploitation of CVE-2016-3374 in the wild and no public exploit code.
Other vulnerabilities in Microsoft Edge
Sources
Also known as GHSA-9gvh-7r9h-q29p.