CVE-2016-3351

CVE-2016-3351 is an information disclosure vulnerability affecting Microsoft Internet Explorer versions 9 through 11 and Microsoft Edge, allowing remote attackers to obtain sensitive information via a crafted website. This vulnerability has a CVSS score of 6.5 (Medium) and is easily exploitable over a network with user interaction, leading to high confidentiality impact. It is actively exploited in the wild, notably by malvertising groups like AdGholas and GooNky, and has garnered significant community discussion and media coverage, despite a lack of public exploit code in Metasploit or ExploitDB. The FAUCET Risk Score of 99/100 further underscores its critical nature.