CVEvulnerability
CVE-2016-7281
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2016-12-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.3 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 2.6 LOW — AV:N/AC:H/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-254
Description
The Web Workers implementation in Microsoft Internet Explorer 10 and 11 and Microsoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Microsoft Browser Security Feature Bypass Vulnerability."
Affected configurations
• microsoft edge
• microsoft internet explorer 10
• microsoft internet explorer 11
Related
Weakness · not in database (1)
References
- http://www.securityfocus.com/bid/94723 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037444 Third Party Advisory, VDB Entry
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-144 docs.microsoft.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-145 docs.microsoft.com
- http://www.securityfocus.com/bid/94723 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037444 Third Party Advisory, VDB Entry
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-144 docs.microsoft.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-145 docs.microsoft.com