CVEvulnerability
CVE-2016-3260
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2016-07-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 11, Microsoft Edge, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."
Affected configurations
• microsoft edge
• microsoft internet explorer 11
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://www.securityfocus.com/bid/91580 www.securityfocus.com
- http://www.securitytracker.com/id/1036283 www.securitytracker.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-084 docs.microsoft.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-085 docs.microsoft.com
- http://www.securityfocus.com/bid/91580 www.securityfocus.com
- http://www.securitytracker.com/id/1036283 www.securitytracker.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-084 docs.microsoft.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-085 docs.microsoft.com