CVE-2016-3202
HighSummary
The Chakra, JScript, and VBScript engines in Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
Risk Assessment
This vulnerability could lead to serious consequences, including system takeover or disruption of service.
Recommendation
It is recommended to update browsers to the latest versions and implement additional security measures, such as blocking unknown scripts.
Other vulnerabilities in Microsoft Internet Explorer 10, Microsoft Internet Explorer 11, Microsoft Edge
See all- CVE-2016-7196High
Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2016-3387High
Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, allowing remote attackers to gain privileges via unspecified vectors.
- CVE-2016-3295High
Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2016-0110High
Microsoft Internet Explorer versions 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2015-6155High
Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka 'Microsoft Browser Memory Corruption Vulnerability.'
- CVE-2015-6064High
Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Microsoft Browser Memory Corruption Vulnerability.'
- CVE-2015-2542High
Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service through memory corruption via a crafted website.
Original NVD description (English source)
The Microsoft (1) Chakra JavaScript, (2) JScript, and (3) VBScript engines, as used in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."