Constellation · CASCA

Constellation explorer

Every signal has a story.Follow the evidence.

Return to triage

Find a CVE by identifier or text

↵ select

Minimum eligible CVSSOrderKEV only

Start with evidence

Current exploration

CVE-2016-3298

Your trail

Where next?

Selected cve

CVE-2016-3298

Microsoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow remote attackers to determine the existence of arbitrary files via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."

20 retained evidence references · snapshot-bound · open authoritative view

StateSource-scoped evidence

Priority72.4–73.5

Coverage98.3%

Connections14

Choose an action.

Evidence state

identity unresolved
known present
source constrained
evidence unknown

Snapshot-bound reason tuple

Last verified source snapshot retainedfactor_a_kev

The admitted source contract constrains coverage for this claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: Review source contract

Evidence supportedfactor_b_epss

Eligible evidence is present for this bounded claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: None

Evidence supportedfactor_c_cvss

Eligible evidence is present for this bounded claim.

Revision: casca-direct-cvss-eligibility-v1
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: None

Source-reported scopefactor_d_breadth

The source assertion is retained, but its canonical identity is unresolved.

Revision: casca-factor-d-obligations-v1
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: Resolve identity

Connections 14

has cited scope1 retained · stored CVE-2016-3298 → n/a · n/a

fea3d450-eb30-4682-ad29-67f75511912f

has environmental constraint1 retained · stored CVE-2016-3298 → microsoft · windows_rt_8.1

6d8c5da1-14a8-40f1-8d60-991dff2c633a

has environmental constraint2 retained · stored CVE-2016-3298 → microsoft · windows_server_2008

b3d4f32d-97c3-4888-84c4-dcbde6f35aeaf7f5ca12-370b-427f-a8e7-834f6364ab0a

has environmental constraint2 retained · stored CVE-2016-3298 → microsoft · windows_server_2012

0e2c5a7d-ce4e-4c99-ba1e-c37ab52e522d7d0a24c8-0468-4885-8300-6f1bd169d029

has environmental constraint1 retained · stored CVE-2016-3298 → microsoft · windows_10_1607

546873f9-e62b-4c9b-b09d-778b07b5579f

has environmental constraint1 retained · stored CVE-2016-3298 → microsoft · windows_10_1511

4a30a3a0-66cd-4f35-9eb6-e3673662cb2a

has environmental constraint1 retained · stored CVE-2016-3298 → microsoft · windows_8.1

d61dfe43-f32c-49e4-8de1-db574c7b92b0

has environmental constraint1 retained · stored CVE-2016-3298 → microsoft · windows_10_1507

ef7042a9-6305-43ab-aece-fa7d30a740bc

has environmental constraint1 retained · stored CVE-2016-3298 → microsoft · windows_vista

1510ae29-07ab-4754-b5ca-bf90a8a0cdc2

has environmental constraint1 retained · stored CVE-2016-3298 → microsoft · windows_7

c6442b20-7c29-4899-afa0-181b9a92a0af

has vulnerable target scope3 retained · stored CVE-2016-3298 → microsoft · windows_server_2008

0c8fccbb-2de7-4e41-97b7-77857ee3b7d938035549-0603-4d17-86f0-7222b84509177d49c3ec-4cbb-4bec-a50d-6b93b5b8f9cc

has vulnerable target scope1 retained · stored CVE-2016-3298 → microsoft · windows_vista

3464a40b-ced9-4b7f-9fcd-10c2d33d0b50

has vulnerable target scope3 retained · stored CVE-2016-3298 → microsoft · internet_explorer

380877d3-a8f0-4a15-916c-64f20ac06e0f918814ab-fbc4-43ba-828e-960747f35d84e40f6774-6566-4ed6-a9d1-0db4d584ddb0

has vulnerable target scope1 retained · stored CVE-2016-3298 → microsoft · windows_7

307ef28f-809d-446e-a135-316516eca3df

Focused snapshot evidence neighborhood.

CVEProductSignalSelected / traceVisual proximity carries zero evidence weight.

Data as of

Evidence current through Oct 22, 2026, 6:07 PM UTC · 12 entities · 14 relationships · bounded complete