CVE-2016-7239

CVE-2016-7239 describes a cross-site scripting (XSS) and information disclosure vulnerability in the RegEx class of the XSS filter within Microsoft Internet Explorer versions 9 through 11 and Microsoft Edge. This low-severity vulnerability (CVSS 3.1) has a network attack vector and high attack complexity, requiring user interaction to achieve a limited impact on confidentiality. While the vulnerability allows attackers to obtain sensitive information, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.