CVE-2016-3382
HighSummary
The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Risk Assessment
This vulnerability may lead to serious security breaches, including the takeover of the user's system or data leakage.
Recommendation
It is recommended to update browsers to the latest versions and implement additional security measures such as content filters.
Other vulnerabilities in Microsoft Internet Explorer 9-11, Microsoft Edge
See all- CVE-2016-7279High
A vulnerability in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
- CVE-2016-7202High
The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2016-7198High
Microsoft Internet Explorer versions 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a different vulnerability than CVE-2016-7195.
- CVE-2016-7195High
Microsoft Internet Explorer versions 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2016-3297High
Microsoft Internet Explorer versions 9 through 11 and Microsoft Edge have a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
- CVE-2016-3293High
Microsoft Internet Explorer versions 9 through 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, known as 'Microsoft Browser Memory Corruption Vulnerability.'
- CVE-2016-3264High
Microsoft Internet Explorer versions 9 through 11 and Microsoft Edge have a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
- CVE-2016-0192High
Microsoft Internet Explorer versions 9 through 11 and Microsoft Edge have a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service through memory corruption via a crafted website.
- CVE-2016-0154High
A vulnerability in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site.
- CVE-2016-0111High
The vulnerability in Microsoft Internet Explorer 9-11 and Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service through memory corruption via a crafted website.
Original NVD description (English source)
The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, as demonstrated by the Chakra JavaScript engine, aka "Scripting Engine Memory Corruption Vulnerability."