CVE-2016-7281

EPSS 34.49%
Published 20.12.2016 06:59:01
Last modified 12.04.2025 10:46:40
Source secure@microsoft.com
Teams watchlist Login
Open Login

The Web Workers implementation in Microsoft Internet Explorer 10 and 11 and Microsoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Microsoft Browser Security Feature Bypass Vulnerability."

Affected products Warnungen 0 Metrics 3 CWE 0 References 7

Data is provided by the National Vulnerability Database (NVD)

Microsoft ≫ Edge Version-

Microsoft ≫ Internet Explorer Version10

Microsoft ≫ Internet Explorer Version11 Update-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	34.49%	0.966

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.3	1.6	3.6	CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
nvd@nist.gov	2.6	4.9	2.9	AV:N/AC:H/Au:N/C:N/I:P/A:N

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-144

http://www.securitytracker.com/id/1037444

Third Party Advisory

VDB Entry

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-145

http://www.securityfocus.com/bid/94723

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2016-7281

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-7281

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-7281

EUVD