CVE-2016-3374

6.5 mediumEPSS 26%

Medium (6.5) in microsoft. EPSS 26% chance of exploitation in the next 30 days.

The PDF library in Microsoft Edge, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information via a crafted web site, aka "PDF Library Information Disclosure Vulnerability," a different vulnerability than CVE-2016-3370.

Severity

CVSS 3.0

6.5 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS: 26% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2016-09-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:edge
microsoft:windows_10
microsoft:windows_8.1
microsoft:windows_rt_8.1
microsoft:windows_server_2012

References

http://blog.malerisch.net/2016/09/microsoft--out-of-bounds-read-pdf-library-cve-2016-3374.html
http://srcincite.io/advisories/src-2016-39/
http://www.securityfocus.com/bid/92838
http://www.securitytracker.com/id/1036789
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105

Check your stack JSON