CVE-2016-3259
HighSummary
The JScript 9, VBScript, and Chakra JavaScript engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge have a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
Risk Assessment
Organizations may be exposed to remote attacks that could lead to unauthorized access to systems or disruption of their operations.
Recommendation
It is recommended to update browsers to the latest versions and implement security measures that restrict the execution of unknown scripts.
Other vulnerabilities in Microsoft JScript 9, VBScript, Chakra JavaScript engines in Internet Explorer and Edge
Original NVD description (English source)
The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 9 through 11, Microsoft Edge, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3248.