The Hyperlink Object Library in Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted URL in a (1) e-mail message or (2) Office document, aka "Internet Explorer Information Disclosure Vulnerability."
https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-0097
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-009