CVE-2016-3295
HighSummary
Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Risk Assessment
This vulnerability can lead to serious consequences, including system takeover or disruption of its operation.
Recommendation
It is recommended to update browsers to the latest versions and avoid visiting suspicious websites.
Other vulnerabilities in Microsoft Internet Explorer 10, Microsoft Internet Explorer 11, Microsoft Edge
See all- CVE-2016-7196High
Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2016-3387High
Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, allowing remote attackers to gain privileges via unspecified vectors.
- CVE-2016-3202High
The Chakra, JScript, and VBScript engines in Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
- CVE-2016-0110High
Microsoft Internet Explorer versions 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2015-6155High
Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka 'Microsoft Browser Memory Corruption Vulnerability.'
- CVE-2015-6064High
Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Microsoft Browser Memory Corruption Vulnerability.'
- CVE-2015-2542High
Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service through memory corruption via a crafted website.
Original NVD description (English source)
Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."