CVEvulnerability
CVE-2016-3319
7.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2016-08-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.0 HIGH — CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-284
Description
The PDF library in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allows remote attackers to execute arbitrary code via a crafted PDF file, aka "Microsoft PDF Remote Code Execution Vulnerability."
Affected configurations
• microsoft edge
• microsoft windows 10
• microsoft windows 10 1511
• microsoft windows 10 1607
• microsoft windows 8.1
• microsoft windows server 2012
• microsoft windows server 2012 r2
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- http://www.securityfocus.com/bid/92293 www.securityfocus.com
- http://www.securitytracker.com/id/1036561 www.securitytracker.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-096 docs.microsoft.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-102 docs.microsoft.com
- http://www.securityfocus.com/bid/92293 www.securityfocus.com
- http://www.securitytracker.com/id/1036561 www.securitytracker.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-096 docs.microsoft.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-102 docs.microsoft.com