Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA10900
HistoryNov 08, 2016 - 12:00 a.m.

KLA10900 Multiple vulnerabilities in Microsoft Browser

2016-11-0800:00:00
Kaspersky Lab
threats.kaspersky.com
181

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.971 High

EPSS

Percentile

99.8%

JSON

Detect date:

11/08/2016

Severity:

Critical

Description:

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to obtain sensitive information, spoof user interface, execute arbitrary code.

Affected products:

Internet Explorer 9
Microsoft Windows Hyperlink Object Library
Internet Explorer 11
Internet Explorer 10
Microsoft Edge (EdgeHTML-based)

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

CVE-2016-7239
CVE-2016-7209
CVE-2016-7227
CVE-2016-7208
CVE-2016-7195
CVE-2016-7196
CVE-2016-7198
CVE-2016-7199
CVE-2016-7200
CVE-2016-7201
CVE-2016-7202
CVE-2016-7203
CVE-2016-7204
CVE-2016-7243
CVE-2016-7242
CVE-2016-7241
CVE-2016-7240

Impacts:

ACE

Related products:

Microsoft Internet Explorer

CVE-IDS:

CVE-2016-72392.6Warning
CVE-2016-72092.6Warning
CVE-2016-72272.6Warning
CVE-2016-72087.6Critical
CVE-2016-71957.6Critical
CVE-2016-71967.6Critical
CVE-2016-71987.6Critical
CVE-2016-71992.6Warning
CVE-2016-72007.6Critical
CVE-2016-72017.6Critical
CVE-2016-72027.6Critical
CVE-2016-72037.6Critical
CVE-2016-72042.6Warning
CVE-2016-72437.6Critical
CVE-2016-72427.6Critical
CVE-2016-72417.6Critical
CVE-2016-72407.6Critical

Microsoft official advisories:

KB list:

3200970
3197867
3197868
3197873
3197874
3197876
3197877
3198585
3198586
3205386
3205383
3205401
3205400
3205408
3205409
3207752
3205394
3206632

Exploitation:

Public exploits exist for this vulnerability.

References

Related

openvas 3
nessus 3
mskb 24
prion 17
osv 8
cve 17
github 8
attackerkb 5
exploitpack 2
zdt 7
threatpost 3
exploitdb 2
mscve 17
checkpoint_advisories 12
symantec 17
seebug 1
zdi 2
cisa_kev 2
myhack58 1
kaspersky 2
thn 2
openvas
openvas
Microsoft Edge Multiple Vulnerabities (3199057)
2016-11-09 00:00:00
Microsoft Internet Explorer Multiple Vulnerabilities (3198467)
2016-11-09 00:00:00
Microsoft Internet Explorer Multiple Vulnerabilities (3204059)
2016-12-14 00:00:00
nessus
nessus
MS16-129: Cumulative Security Update for Microsoft Edge (3199057)
2016-11-08 00:00:00
MS16-142: Cumulative Security Update for Internet Explorer (3198467)
2016-11-08 00:00:00
MS16-144: Cumulative Security Update for Internet Explorer (3204059)
2016-12-13 00:00:00
mskb
mskb
MS16-129: Cumulative security update for Microsoft Edge: November 8, 2016
2016-11-08 00:00:00
MS16-142: Cumulative security update for Internet Explorer: November 8, 2016
2016-11-08 00:00:00
MS16-142: Security update for Internet Explorer: November 8, 2016
2016-11-08 08:00:00
prion
prion
Memory corruption
2016-11-10 06:59:00
Memory corruption
2016-11-10 06:59:00
Memory corruption
2016-11-10 06:59:00
osv
osv
ChakraCore RCE Vulnerability
2022-05-14 02:22:42
ChakraCore RCE Vulnerability
2022-05-14 02:22:42
ChakraCore RCE Vulnerability
2022-05-14 02:22:18
cve
cve
CVE-2016-7242
2016-11-10 06:59:00
CVE-2016-7202
2016-11-10 06:59:00
CVE-2016-7240
2016-11-10 06:59:00
github
github
ChakraCore RCE Vulnerability
2022-05-14 02:22:41
ChakraCore RCE Vulnerability
2022-05-14 02:22:42
ChakraCore RCE Vulnerability
2022-05-14 02:22:42
attackerkb
attackerkb
CVE-2016-7201
2016-11-10 00:00:00
CVE-2016-7200
2016-11-10 00:00:00
CVE-2016-7243
2016-11-10 00:00:00
exploitpack
exploitpack
Microsoft Edge (Windows 10) - chakra.dll Information Leak Type Confusion Remote Code Execution
2017-01-05 00:00:00
Microsoft Edge Scripting Engine - Memory Corruption (MS16-129)
2016-11-21 00:00:00
zdt
zdt
Microsoft Windows 10 Edge - chakra.dll Info Leak / Type Confusion Remote Code Execution Exploit
2017-01-06 00:00:00
Microsoft Edge - JSON.parse Info Leak Vulnerability
2016-12-06 00:00:00
Microsoft Edge Scripting Engine - Memory Corruption (MS16-129) Exploit
2016-11-24 00:00:00
threatpost
threatpost
Two New Edge Exploits Integrated into Sundown Exploit Kit
2017-01-10 11:28:20
Microsoft Patches Zero Day Disclosed by Google
2016-11-08 14:57:26
Microsoft Patches Publicly Disclosed IE, Edge Vulnerabilities
2016-12-13 15:27:58
exploitdb
exploitdb
Microsoft Edge (Windows 10) - 'chakra.dll' Information Leak / Type Confusion Remote Code Execution
2017-01-05 00:00:00
Microsoft Edge Scripting Engine - Memory Corruption (MS16-129)
2016-11-21 00:00:00
mscve
mscve
Microsoft Browser Memory Corruption Vulnerability
2016-11-08 08:00:00
Microsoft Browser Memory Corruption Vulnerability
2016-11-08 08:00:00
Scripting Engine Memory Corruption Vulnerability
2016-11-08 08:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Browser Remote Code Execution (MS16-129: CVE-2016-7241)
2016-11-08 00:00:00
Microsoft Browser Memory Corruption (MS16-142: CVE-2016-7195)
2016-11-08 00:00:00
Microsoft Edge Scripting Engine Memory Corruption (MS16-129: CVE-2016-7240)
2016-11-08 00:00:00
symantec
symantec
Microsoft Internet Explorer and Edge CVE-2016-7241 Remote Memory Corruption Vulnerability
2016-11-08 00:00:00
Microsoft Edge and Internet Explorer XSS Filter CVE-2016-7239 Information Disclosure Vulnerability
2016-11-08 00:00:00
Microsoft Internet Explorer and Edge CVE-2016-7195 Remote Memory Corruption Vulnerability
2016-11-08 00:00:00
seebug
seebug
Microsoft Edge local files disclosure(CVE-2016-7239)
2017-04-15 00:00:00
zdi
zdi
Microsoft Internet Explorer Array.splice Memory Corruption Remote Code Execution Vulnerability
2017-06-21 00:00:00
Microsoft Windows JavaScript reverse Method Heap-based Buffer Overflow Remote Code Execution Vulnerability
2016-11-08 00:00:00
cisa_kev
cisa_kev
Microsoft Edge Memory Corruption Vulnerability
2022-03-28 00:00:00
Microsoft Edge Memory Corruption Vulnerability
2022-03-28 00:00:00
myhack58
myhack58
Windows 10 x64 Edge CVE-2016-7200 & CVE-2016-7201 vulnerability analysis and exploit-vulnerability warning-the black bar safety net
2017-05-21 00:00:00
kaspersky
kaspersky
KLA11832 Multiple vulnerabilities in Microsoft Products (ESU)
2016-11-08 00:00:00
KLA10897 Multiple vulnerabilities in Microsoft Windows
2016-11-08 00:00:00
thn
thn
Microsoft releases 12 Security Updates; Including 6 Critical Patches
2016-12-14 01:07:00
Experts Warn of Browser Extensions Spying On Users via Cloud9 Chrome Botnet Network
2022-11-09 11:01:00

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.971 High

EPSS

Percentile

99.8%

JSON
Related for KLA10900
openvas3nessus3mskb24prion17osv8cve17github8attackerkb5exploitpack2zdt7threatpost3exploitdb2mscve17checkpoint_advisories12symantec17seebug1zdi2cisa_kev2myhack581kaspersky2thn2