CVE-2016-3321

CVE-2016-3321

Microsoft Internet Explorer 10 and 11 load different files for attempts to open a file:// URL depending on whether the file exists, which allows local users to enumerate files via vectors involving a file:// URL and an HTML5 sandbox iframe, aka "Internet Explorer Information Disclosure Vulnerability."

Source: CVE-2016-3321

CVE-2016-3320 (windows_10, windows_8.1, windows_rt_8.1, windows_server_2012)

CVE-2016-3320 (windows_10, windows_8.1, windows_rt_8.1, windows_server_2012)

Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow attackers to bypass the Secure Boot protection mechanism by leveraging (1) administrative or (2) physical access to install a crafted boot manager, aka "Secure Boot Security Feature Bypass."

Source: CVE-2016-3320 (windows_10, windows_8.1, windows_rt_8.1, windows_server_2012)

CVE-2016-3320

CVE-2016-3320

Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow attackers to bypass the Secure Boot protection mechanism by leveraging (1) administrative or (2) physical access to install a crafted boot manager, aka "Secure Boot Security Feature Bypass."

Source: CVE-2016-3320

CVE-2016-3319 (edge, windows_10, windows_8.1, windows_server_2012)

CVE-2016-3319 (edge, windows_10, windows_8.1, windows_server_2012)

The PDF library in Microsoft Windows 8.1; Windows Server 2012 Gold and R2; Windows 10 Gold, 1511, and 1607; and Microsoft Edge allows remote attackers to execute arbitrary code via a crafted PDF file, aka "Microsoft PDF Remote Code Execution Vulnerability."

Source: CVE-2016-3319 (edge, windows_10, windows_8.1, windows_server_2012)