CVE-2016-0189

🗓️ 11 May 2016 01:00:00Reported by microsoftType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 1281 Views🌐 WEB

Microsoft JScript and VBScript engines in IE 9-11 allow remote attackers to execute arbitrary code or cause denial of service via crafted website

Reporter	Title	Published	Views	Family All 77
zdt	Microsoft Internet Explorer 11 (Windows 10) - VBScript Memory Corruption Proof-of-Concept Exploit (M	22 Jun 201600:00	–	zdt
GithubExploit	Exploit for Out-of-bounds Write in Microsoft	25 Jun 201601:48	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Microsoft	22 Jun 201623:03	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Microsoft	29 Apr 202620:50	–	githubexploit
ATTACKERKB	CVE-2016-0189	11 May 201600:00	–	attackerkb
ATTACKERKB	CVE-2016-0187	11 May 201600:00	–	attackerkb
BDU FSTEC	The vulnerability of JScript and VBScript script handlers in Internet Explorer, related to the execution of operations beyond the buffer boundaries, allows attackers to execute arbitrary code or cause service interruptions.	18 Nov 202100:00	–	bdu_fstec
Circl	CVE-2016-0189	2 Oct 201616:51	–	circl
CISA KEV Catalog	Microsoft Internet Explorer Memory Corruption Vulnerability	28 Mar 202200:00	–	cisa_kev
CNVD	Microsoft JScript and VBScript Scripting Engine Memory Corruption Vulnerability (CNVD-2016-03119)	12 May 201600:00	–	cnvd

NVD

Node

AND

Node

AND

Node

AND

Node

AND

Node

AND

Source	Link
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-053
securityfocus	www.securityfocus.com/bid/90012
exploit-db	www.exploit-db.com/exploits/40118/
virusbulletin	www.virusbulletin.com/virusbulletin/2017/01/journey-and-evolution-god-mode-2016-cve-2016-0189/
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-051
securitytracker	www.securitytracker.com/id/1035820
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
ieshell32.dll	path	/ieshell32.dll	Stage 2 DLL delivered to the victim (ieshell32.dll) as part of the exploit chain	CWE-787
ielocalserver.dll	path	/ielocalserver.dll	Local server DLL delivered to the victim (ielocalserver.dll) as part of the exploit chain	CWE-787

17 Jun 2026 00:37Current

7.8High risk

Vulners AI Score7.8

CVSS 3.17.5

CVSS 27.6

EPSS0.92791

SSVC