Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA10829
HistoryJun 14, 2016 - 12:00 a.m.

KLA10829 Multiple vulnerabilities in Microsoft Edge and Internet Explorer

2016-06-1400:00:00
Kaspersky Lab
threats.kaspersky.com
33

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.939 High

EPSS

Percentile

99.1%

JSON

Detect date:

06/14/2016

Severity:

High

Description:

Multiple serious vulnerabilities have been found in Microsoft Edge. Malicious users can exploit these vulnerabilities to bypass security restrictions, perform privilege escalation, execute arbitrary code or obtain sensitive information.

Affected products:

Microsoft Edge
Microsoft Internet Explorer versions 9 through 11

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

CVE-2016-3207
CVE-2016-3206
CVE-2016-3205
CVE-2016-3215
CVE-2016-3214
CVE-2016-3213
CVE-2016-3212
CVE-2016-3211
CVE-2016-3210
CVE-2016-3203
CVE-2016-3202
CVE-2016-3201
CVE-2016-3199
CVE-2016-3198
CVE-2016-0199
CVE-2016-0200
CVE-2016-3222

Impacts:

ACE

Related products:

Microsoft Edge

CVE-IDS:

CVE-2016-32077.6Critical
CVE-2016-32067.6Critical
CVE-2016-32057.6Critical
CVE-2016-32154.3Warning
CVE-2016-32149.3Critical
CVE-2016-32139.3Critical
CVE-2016-32124.3Warning
CVE-2016-32119.3Critical
CVE-2016-32109.3Critical
CVE-2016-32039.3Critical
CVE-2016-32027.6Critical
CVE-2016-32014.3Warning
CVE-2016-31999.3Critical
CVE-2016-31984.3Warning
CVE-2016-01999.3Critical
CVE-2016-02009.3Critical
CVE-2016-32229.3Critical

Microsoft official advisories:

KB list:

3163017
3163018
3160005

Exploitation:

Public exploits exist for this vulnerability.

References

Related

mskb 12
openvas 5
nessus 5
kaspersky 3
cve 17
mscve 17
prion 17
osv 3
github 3
symantec 17
checkpoint_advisories 15
myhack58 1
zdi 7
zdt 2
exploitpack 1
packetstorm 1
threatpost 1
exploitdb 1
mskb
mskb
MS16-063: Cumulative security update for Internet Explorer: June 14, 2016
2016-06-14 00:00:00
MS16-063: Security update for Internet Explorer: June 14, 2016
2016-06-14 07:00:00
MS16-068: Cumulative security update for Microsoft Edge: June 14, 2016
2016-06-14 00:00:00
openvas
openvas
Microsoft Internet Explorer Multiple Vulnerabilities (3163649)
2016-06-15 00:00:00
Microsoft Edge Multiple Vulnerabilities (3163656)
2016-06-15 00:00:00
Microsoft Windows JScript and VBScript Remote Code Execution Vulnerabilities (3163640)
2016-06-15 00:00:00
nessus
nessus
MS16-063: Cumulative Security Update for Internet Explorer (3163649)
2016-06-14 00:00:00
MS16-068: Cumulative Security Update for Microsoft Edge (3163656)
2016-06-14 00:00:00
MS16-069: Cumulative Security Update for JScript and VBScript (3163640)
2016-06-14 00:00:00
kaspersky
kaspersky
KLA10828 Code execution vulnerabilities in Microsoft JScript and VBScript
2016-06-14 00:00:00
KLA11911 Multiple vulnerabilites in Microsoft Products (ESU)
2016-06-14 00:00:00
KLA10825 Multiple vulnerabilities in Microsoft Windows
2016-06-14 00:00:00
cve
cve
CVE-2016-3205
2016-06-16 01:59:00
CVE-2016-3207
2016-06-16 01:59:00
CVE-2016-3206
2016-06-16 01:59:00
mscve
mscve
Scripting Engine Memory Corruption Vulnerability
2016-06-14 07:00:00
Scripting Engine Memory Corruption Vulnerability
2016-06-14 07:00:00
Scripting Engine Memory Corruption Vulnerability
2016-06-14 07:00:00
prion
prion
Memory corruption
2016-06-16 01:59:00
Memory corruption
2016-06-16 01:59:00
Memory corruption
2016-06-16 01:59:00
osv
osv
ChakraCore RCE Vulnerability
2022-05-14 02:24:35
ChakraCore RCE Vulnerability
2022-05-14 02:24:33
ChakraCore RCE Vulnerability
2022-05-14 02:24:35
github
github
ChakraCore RCE Vulnerability
2022-05-14 02:24:35
ChakraCore RCE Vulnerability
2022-05-14 02:24:33
ChakraCore RCE Vulnerability
2022-05-14 02:24:35
symantec
symantec
Microsoft Windows PDF Library CVE-2016-3203 Remote Code Execution Vulnerability
2016-06-14 00:00:00
Microsoft Internet Explorer CVE-2016-3206 Scripting Engine Remote Memory Corruption Vulnerability
2016-06-14 00:00:00
Microsoft Edge CVE-2016-3198 Security Bypass Vulnerability
2016-06-14 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Internet Explorer Memory Corruption (MS16-063: CVE-2016-3211)
2016-06-14 00:00:00
Microsoft Internet Explorer Memory Corruption (MS16-063: CVE-2016-3206)
2016-06-14 00:00:00
Microsoft Edge Security Feature Bypass (MS16-068: CVE-2016-3198)
2016-06-14 00:00:00
myhack58
myhack58
BadTunnel Super Vulnerability CVE-2 0 1 6-3 2 1 3 Technical Analysis and protection solution-vulnerability warning-the black bar safety net
2016-06-27 00:00:00
zdi
zdi
Microsoft Windows PDF Library AES Encryption Out-Of-Bounds Read Information Disclosure Vulnerability
2016-06-22 00:00:00
Microsoft Internet Explorer PerformDoDragDrop Protected Mode Sandbox Escape Vulnerability
2016-06-16 00:00:00
Microsoft Edge JavaScript filter Method Out-Of-Bounds Write Remote Code Execution Vulnerability
2016-06-16 00:00:00
zdt
zdt
Microsoft Edge - CBase­Scriptable::Private­Query­Interface Memory Corruption (MS16-068) Vulnerabilit
2016-12-06 00:00:00
Microsoft Internet Explorer 11 - Garbage Collector Attribute Type Confusion (MS16-063)
2016-06-21 00:00:00
exploitpack
exploitpack
Microsoft Internet Explorer 11 - Garbage Collector Attribute Type Confusion (MS16-063)
2016-06-21 00:00:00
packetstorm
packetstorm
Microsoft Internet Explorer 11 Garbage Collector Attribute Type Confusion
2016-06-17 00:00:00
threatpost
threatpost
Patched BadTunnel Windows Bug Has 'Extensive' Impact
2016-06-15 15:23:41
exploitdb
exploitdb
Microsoft Internet Explorer 11 - Garbage Collector Attribute Type Confusion (MS16-063)
2016-06-21 00:00:00

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.939 High

EPSS

Percentile

99.1%

JSON
Related for KLA10829
mskb12openvas5nessus5kaspersky3cve17mscve17prion17osv3github3symantec17checkpoint_advisories15myhack581zdi7zdt2exploitpack1packetstorm1threatpost1exploitdb1