CVEvulnerability
CVE-2016-3387
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2016-10-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which allows remote attackers to gain privileges via unspecified vectors, aka "Microsoft Browser Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3388.
Affected configurations
• microsoft edge
• microsoft internet explorer 10
• microsoft internet explorer 11
Related
Weakness · not in database (1)
References
- http://www.securityfocus.com/bid/93381 www.securityfocus.com
- http://www.securitytracker.com/id/1036992 www.securitytracker.com
- http://www.securitytracker.com/id/1036993 www.securitytracker.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-118 docs.microsoft.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-119 docs.microsoft.com
- https://www.exploit-db.com/exploits/40607/ www.exploit-db.com
- http://www.securityfocus.com/bid/93381 www.securityfocus.com
- http://www.securitytracker.com/id/1036992 www.securitytracker.com
- http://www.securitytracker.com/id/1036993 www.securitytracker.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-118 docs.microsoft.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-119 docs.microsoft.com
- https://www.exploit-db.com/exploits/40607/ www.exploit-db.com