Summary
An information disclosure vulnerability exists when the Microsoft Internet Messaging API improperly handles objects in memory. An attacker who successfully exploited this vulnerability could allow the attacker to test for the presence of files on disk.
- Vendor
- Microsoft
- Product
- Internet Explorer
- Added to KEV
- May 24, 2022
- Remediation due
- Jun 14, 2022 (US federal deadline)
- Ransomware use
- Not known
- Weakness
- CWE-200
- EPSS
- 33.3% as of Nov 12
In the news
- No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
- none recorded
References