Lucene search

K
cve[email protected]CVE-2015-6168
HistoryDec 09, 2015 - 11:59 a.m.

CVE-2015-6168

2015-12-0911:59:49
CWE-119
web.nvd.nist.gov
25
cve-2015-6168
microsoft edge
remote code execution
denial of service
memory corruption
vulnerability

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.224 Low

EPSS

Percentile

96.5%

Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka โ€œMicrosoft Edge Memory Corruption Vulnerability,โ€ a different vulnerability than CVE-2015-6153.

Affected configurations

NVD
Node
microsoftedgeMatch-
CPENameOperatorVersion
microsoft:edgemicrosoft edgeeq-

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.224 Low

EPSS

Percentile

96.5%