CVE-2016-3291

CVE-2016-3291 describes an information disclosure vulnerability in Microsoft Internet Explorer 11 and Microsoft Edge. This flaw allows a remote attacker to obtain sensitive information by tricking a user into visiting a specially crafted website, due to the browsers mishandling cross-origin requests. The vulnerability has a low CVSS score of 2.4, indicating a low severity with a network attack vector, low attack complexity, and requiring user interaction for a limited impact on confidentiality. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.