Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA10789
HistoryApr 12, 2016 - 12:00 a.m.

KLA10789 Multiple vulnerabilities in Microsoft Browsers

2016-04-1200:00:00
Kaspersky Lab
threats.kaspersky.com
45

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.927 High

EPSS

Percentile

99.0%

JSON

Detect date:

04/12/2016

Severity:

Critical

Description:

Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information.

Affected products:

Internet Explorer 11
Internet Explorer 10
Internet Explorer 9
Microsoft Edge (EdgeHTML-based)

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

CVE-2016-0154
CVE-2016-0155
CVE-2016-0156
CVE-2016-0157
CVE-2016-0158
CVE-2016-0160
CVE-2016-0161
CVE-2016-0162
CVE-2016-0164
CVE-2016-0166

Impacts:

ACE

Related products:

Microsoft Internet Explorer

CVE-IDS:

CVE-2016-01547.6Critical
CVE-2016-01557.6Critical
CVE-2016-01567.6Critical
CVE-2016-01577.6Critical
CVE-2016-01584.3Warning
CVE-2016-01607.2High
CVE-2016-01614.3Warning
CVE-2016-01624.3Warning
CVE-2016-01647.6Critical
CVE-2016-01667.6Critical

Microsoft official advisories:

KB list:

3147461
3147458
3148198
4015549
4015550
4015221
4014661
4015551
4015219

References

Related

mskb 11
openvas 3
nessus 3
prion 10
cve 10
checkpoint_advisories 8
symantec 10
mscve 10
zdi 3
attackerkb 1
cisa_kev 1
packetstorm 1
kaspersky 2
thn 1
mskb
mskb
MS16-038: Cumulative security update for Microsoft Edge: April 12, 2016
2016-04-12 00:00:00
MS16-037: Cumulative security update for Internet Explorer: April 12, 2016
2016-04-12 00:00:00
MS16-037: Security update for Internet Explorer: April 12, 2016
2016-04-12 07:00:00
openvas
openvas
Microsoft Edge Multiple Vulnerabilities (3148532)
2016-04-13 00:00:00
Microsoft Internet Explorer Multiple Vulnerabilities (3148531)
2016-04-13 00:00:00
Microsoft Internet Explorer Information Disclosure Vulnerability (3148531)
2017-04-13 00:00:00
nessus
nessus
MS16-038: Cumulative Security Update for Microsoft Edge (3148532)
2016-04-12 00:00:00
MS16-037: Cumulative Security Update for Internet Explorer (3148531)
2016-04-12 00:00:00
Mac OS X < 10.11.4 Multiple Vulnerabilities
2016-09-02 00:00:00
prion
prion
Memory corruption
2016-04-12 23:59:00
Memory corruption
2016-04-12 23:59:00
Memory corruption
2016-04-12 23:59:00
cve
cve
CVE-2016-0156
2016-04-12 23:59:00
CVE-2016-0155
2016-04-12 23:59:00
CVE-2016-0157
2016-04-12 23:59:00
checkpoint_advisories
checkpoint_advisories
Microsoft Edge Memory Corruption (MS16-038: CVE-2016-0157)
2016-04-12 00:00:00
Microsoft Internet Explorer Memory Corruption (MS16-037: CVE-2016-0164)
2016-04-12 00:00:00
Microsoft Edge Elevation of Privilege (MS16-038: CVE-2016-0161)
2016-04-12 00:00:00
symantec
symantec
Microsoft Edge CVE-2016-0157 Remote Memory Corruption Vulnerability
2016-04-12 00:00:00
Microsoft Internet Explorer CVE-2016-0164 Remote Memory Corruption Vulnerability
2016-04-12 00:00:00
Microsoft Edge CVE-2016-0161 Remote Privilege Escalation Vulnerability
2016-04-12 00:00:00
mscve
mscve
Microsoft Browser Memory Corruption Vulnerability
2016-04-12 07:00:00
Internet Explorer Memory Corruption Vulnerability
2016-04-12 07:00:00
Internet Explorer Information Disclosure Vulnerability
2016-04-12 07:00:00
zdi
zdi
Microsoft Edge keyframes Out-Of-Bounds Read Remote Code Execution Vulnerability
2016-04-12 00:00:00
Microsoft Edge Proxy Object Universal Cross Site Scripting Vulnerability
2016-04-12 00:00:00
Microsoft Internet Explorer CMediaEngine Use-After-Free Remote Code Execution Vulnerability
2016-04-12 00:00:00
attackerkb
attackerkb
CVE-2016-0162
2016-04-12 00:00:00
cisa_kev
cisa_kev
Microsoft Internet Explorer Information Disclosure Vulnerability
2022-05-24 00:00:00
packetstorm
packetstorm
Microsoft Internet Explorer 11 DLL Hijacking
2016-04-15 00:00:00
kaspersky
kaspersky
KLA11915 Multiple vulnerabilities in Microsoft Products (ESU)
2017-04-12 00:00:00
KLA11916 Multiple vulnerabilities in Microsoft Products (ESU)
2016-04-12 00:00:00
thn
thn
Hacking Millions with Just an Image — Recipe: Pixels, Ads & Exploit Kit
2016-12-06 21:08:00

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.927 High

EPSS

Percentile

99.0%

JSON
Related for KLA10789
mskb11openvas3nessus3prion10cve10checkpoint_advisories8symantec10mscve10zdi3attackerkb1cisa_kev1packetstorm1kaspersky2thn1