vulnerability
Microsoft Windows: CVE-2016-3392: Internet Explorer Security Feature Bypass Vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 3 | (AV:N/AC:H/Au:N/C:N/I:P/A:N) | Oct 14, 2016 | Jun 10, 2024 | Oct 14, 2025 |
Severity
3
CVSS
(AV:N/AC:H/Au:N/C:N/I:P/A:N)
Published
Oct 14, 2016
Added
Jun 10, 2024
Modified
Oct 14, 2025
Description
The Edge Content Security Policy feature in Microsoft Edge does not properly validate documents, which allows remote attackers to bypass intended access restrictions via a crafted web site, aka "Microsoft Browser Security Feature Bypass Vulnerability."
Solutions
microsoft-windows-windows_10-1507-kb3192440microsoft-windows-windows_10-1511-kb3192441microsoft-windows-windows_10-1607-kb3194798
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.