CVE-2016-3248
HighSummary
The JScript 9, VBScript, and Chakra JavaScript engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge have a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
Risk Assessment
This vulnerability can lead to serious consequences, including system takeover or disruption, posing a security threat to the organization.
Recommendation
It is recommended to update browsers to the latest versions and implement filters to protect against malicious websites.
Other vulnerabilities in Microsoft JScript 9, VBScript, Chakra JavaScript engines in Internet Explorer and Edge
Original NVD description (English source)
The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 9 through 11, Microsoft Edge, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3259.