CVE-2016-0125 describes an information disclosure vulnerability in Microsoft Edge, where the browser improperly handles the Referer policy. This flaw allows a malicious HTTPS website to potentially obtain sensitive browser history and request details from a user. Rated with a CVSS score of 3.1 (LOW), exploitation requires user interaction (UI:R) and has a low impact on confidentiality (C:L). There is no evidence of active exploitation, and no public exploit code or significant community discussion has been observed for this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.2 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.1 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.