Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 24/05/2022. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| internet explorer | = 10= 11= 9 |
Microsoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow remote attackers to determine the existence of arbitrary files via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free