CVE-2016-3392
- EPSS 9.43%
- Published 14.10.2016 02:59:29
- Last modified 12.04.2025 10:46:40
The Edge Content Security Policy feature in Microsoft Edge does not properly validate documents, which allows remote attackers to bypass intended access restrictions via a crafted web site, aka "Microsoft Browser Security Feature Bypass Vulnerability...
CVE-2016-3391
- EPSS 27.41%
- Published 14.10.2016 02:59:28
- Last modified 12.04.2025 10:46:40
Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow context-dependent attackers to discover credentials by leveraging access to a memory dump, aka "Microsoft Browser Information Disclosure Vulnerability."
CVE-2016-3390
- EPSS 22.99%
- Published 14.10.2016 02:59:27
- Last modified 12.04.2025 10:46:40
The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, as demonstrated by the Chakra JavaScript engine, aka ...
CVE-2016-3389
- EPSS 18.98%
- Published 14.10.2016 02:59:26
- Last modified 12.04.2025 10:46:40
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerabilit...
CVE-2016-3388
- EPSS 47.22%
- Published 14.10.2016 02:59:24
- Last modified 12.04.2025 10:46:40
Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which allows remote attackers to gain privileges via unspecified vectors, aka "Microsoft Browser Elevation of Privilege Vulnerability," a ...
CVE-2016-3387
- EPSS 33.35%
- Published 14.10.2016 02:59:23
- Last modified 12.04.2025 10:46:40
Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which allows remote attackers to gain privileges via unspecified vectors, aka "Microsoft Browser Elevation of Privilege Vulnerability," a ...
CVE-2016-3386
- EPSS 77.91%
- Published 14.10.2016 02:59:22
- Last modified 12.04.2025 10:46:40
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerabilit...
CVE-2016-3382
- EPSS 23.33%
- Published 14.10.2016 02:59:18
- Last modified 12.04.2025 10:46:40
The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, as demonstrated by the Chakra JavaScript en...
CVE-2016-3331
- EPSS 23.33%
- Published 14.10.2016 02:59:14
- Last modified 12.04.2025 10:46:40
Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."
CVE-2016-3267
- EPSS 22.2%
- Published 14.10.2016 02:59:11
- Last modified 12.04.2025 10:46:40
Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to determine the existence of unspecified files via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."