CVE-2016-3391

CVE-2016-3391 is an information disclosure vulnerability affecting Microsoft Internet Explorer 10 and 11, and Microsoft Edge. It allows an attacker with access to a memory dump to discover user credentials. The vulnerability has a CVSS score of 5.3 (Medium), indicating a network-based attack with high complexity, requiring user interaction, but leading to high confidentiality impact without affecting integrity or availability. While its EPSS score suggests a higher-than-average exploitability probability, there is no known public exploit code (Metasploit, Nuclei, ExploitDB) and it is not listed in CISA's KEV catalog, with minimal community discussion.