5.3
CVE-2016-3388
- EPSS 27.59%
- Veröffentlicht 14.10.2016 02:59:24
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Quelle secure@microsoft.com
- CVE-Watchlists
- Unerledigt
LoginMicrosoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which allows remote attackers to gain privileges via unspecified vectors, aka "Microsoft Browser Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3387.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 27.59% | 0.978 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.3 | 1.6 | 3.6 |
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
|
| nvd@nist.gov | 2.6 | 4.9 | 2.9 |
AV:N/AC:H/Au:N/C:N/I:P/A:N
|
http://www.securitytracker.com/id/1036992
http://www.securitytracker.com/id/1036993
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-118
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-119
http://www.securityfocus.com/bid/93382
https://www.exploit-db.com/exploits/40606/