Kaspersky LabKLA10858KLA10858 Multiple vulnerabilities in Microsoft Edge and Internet Explorer
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.942 High
EPSS
Percentile
99.1%
Detect date:
08/09/2016
Severity:
High
Description:
Multiple serious vulnerabilities have been found in Microsoft Internet Explorer and Edge. Malicious users can exploit these vulnerabilities to execute arbitrary code or obtain sensitive information.
Affected products:
Microsoft Internet Explorer versions 9 through 11
Microsoft Edge
Solution:
Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)
Original advisories:
CVE-2016-3322
CVE-2016-3321
CVE-2016-3319
CVE-2016-3296
CVE-2016-3293
CVE-2016-3290
CVE-2016-3289
CVE-2016-3288
CVE-2016-3329
CVE-2016-3327
CVE-2016-3326
Impacts:
ACE
Related products:
CVE-IDS:
CVE-2016-33227.6Critical
CVE-2016-33211.9Warning
CVE-2016-33199.3Critical
CVE-2016-32967.6Critical
CVE-2016-32937.6Critical
CVE-2016-32907.6Critical
CVE-2016-32897.6Critical
CVE-2016-32887.6Critical
CVE-2016-33292.6Warning
CVE-2016-33272.6Warning
CVE-2016-33262.6Warning
Microsoft official advisories:
KB list:
4038788
3176495
3176492
3176493
3175443
4022719
4022726
4022714
4021558
4022724
4022727
4022715
Exploitation:
Public exploits exist for this vulnerability.
References
support.microsoft.com/kb/3175443
support.microsoft.com/kb/3176492
support.microsoft.com/kb/3176493
support.microsoft.com/kb/3176495
support.microsoft.com/kb/4021558
support.microsoft.com/kb/4022714
support.microsoft.com/kb/4022715
support.microsoft.com/kb/4022719
support.microsoft.com/kb/4022724
support.microsoft.com/kb/4022726
support.microsoft.com/kb/4022727
support.microsoft.com/kb/4038788
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3288
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3289
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3290
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3293
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3296
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3319
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3321
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3322
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3326
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3327
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3329
portal.msrc.microsoft.com/en-us/security-guidance
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-3288
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-3289
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-3290
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-3293
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-3296
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-3319
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-3321
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-3322
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-3326
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-3327
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-3329
statistics.securelist.com/vulnerability-scan/month
threats.kaspersky.com/en/class/Exploit/
threats.kaspersky.com/en/product/Microsoft-Edge/
threats.kaspersky.com/en/product/Microsoft-Internet-Explorer/
Related
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.942 High
EPSS
Percentile
99.1%