CVE-2016-7200

Warnung

Exploit

EPSS 89.23%
Veröffentlicht 10.11.2016 06:59:15
Zuletzt bearbeitet 22.10.2025 00:15:55
Quelle secure@microsoft.com
CVE-Watchlists
Login
Unerledigt
Login

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7201, CVE-2016-7202, CVE-2016-7203, CVE-2016-7208, CVE-2016-7240, CVE-2016-7242, and CVE-2016-7243.

Betroffene Produkte Warnungen 1 Metriken 4 CWE 1 Referenzen 11

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Edge Version-

   Microsoft ≫ Windows 10 1507 Version-
   Microsoft ≫ Windows 10 1511 Version-
   Microsoft ≫ Windows 10 1607 Version-
   Microsoft ≫ Windows Server 2016 Version- Update- HwPlatformx64

28.03.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog

Microsoft Edge Memory Corruption Vulnerability

Schwachstelle

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.

Beschreibung

Apply updates per vendor instructions.

Erforderliche Maßnahmen

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	89.23%	0.995

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov	7.6	4.9	10	AV:N/AC:H/Au:N/C:C/I:C/A:C
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H