CVE-2016-0005

MEDIUM

Microsoft Internet Explorer - Improper Input Validation

Title source: rule

Description

Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Internet Explorer Elevation of Privilege Vulnerability."

References (2)

Scores

CVSS v3 4.3
EPSS 0.3112
EPSS Percentile 96.7%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Classification

CWE
CWE-20
Status draft

Affected Products (3)

microsoft/internet_explorer
microsoft/internet_explorer
microsoft/internet_explorer

Timeline

Published Jan 13, 2016
Tracked Since Feb 18, 2026