CVE-2016-3247

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."...

CVE-2016-3247

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."...

Information disclosure

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."...

Privilege escalation

Microsoft Internet Explorer 10 and 11 mishandles integrity settings and zone settings, which allows remote attackers to bypass a sandbox protection mechanism via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability."...

Memory corruption

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...

Security feature bypass

Microsoft Internet Explorer 9 through 11 mishandles .url files from the Internet zone, which allows remote attackers to bypass intended access restrictions via a crafted file, aka "Internet Explorer Security Feature Bypass."...

Information disclosure

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."...

CVE-2016-3353

Microsoft Internet Explorer 9 through 11 mishandles .url files from the Internet zone, which allows remote attackers to bypass intended access restrictions via a crafted file, aka "Internet Explorer Security Feature Bypass."...

CVE-2016-3292

CVE-2016-3292 is the Internet Explorer Elevation of Privilege vulnerability. The connected MS advisories (MS16-104, KB3185319, and related MSRC entries) confirm that Internet Explorer on affected Windows versions mishandles zone and integrity settings, enabling sandbox bypass via a crafted webpag...

CVE-2016-3353

CVE-2016-3353 affects Microsoft Internet Explorer 9–11. The vulnerability arises because IE mishandles .url shortcut files from the Internet zone, enabling a security feature bypass that could bypass access restrictions via a crafted file and is described as the Internet Explorer Security Feature...

CVE-2016-3324

CVE-2016-3324 is a memory-corruption vulnerability in Microsoft Internet Explorer 9–11 that allows remote code execution when a user visits a crafted page. The CIRCL/CVE registry notes an exploitation path with Exploit DB (exploits/40748), indicating in-the-wild or publicly known exploitation for...

CVE-2016-3247

CVE-2016-3247 affects Microsoft Internet Explorer 11 and Microsoft Edge, allowing remote code execution or memory corruption via a crafted web site. The root cause is memory handling in the browser when loading objects, enabling code execution with the attacker’s privileges. In the wild exploits ...

CVE-2016-3325

CVE-2016-3325 affects Microsoft Internet Explorer 11 and Microsoft Edge. A memory handling flaw in IE/Edge enables information disclosure when visiting a crafted site; attack vector is network, with user interaction required (per CVSS3). Exploitation has been observed (CVE-2016-3325 appears in ex...

CVE-2016-3291

CVE-2016-3291 affects Microsoft Internet Explorer 11 and Microsoft Edge through mishandling of cross-origin requests, enabling information disclosure via a crafted web page. The root cause is incorrect handling of cross-origin resources in the affected browsers, allowing remote attackers to obtai...

CVE-2016-3292

Microsoft Internet Explorer 10 and 11 mishandles integrity settings and zone settings, which allows remote attackers to bypass a sandbox protection mechanism via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability."...

CVE-2016-3375

The OLE Automation mechanism and VBScript scripting engine in Microsoft Internet Explorer 9 through 11, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow remote attackers to...

CVE-2016-3375

The CVE-2016-3375 entry describes a memory-corruption vulnerability in the Microsoft OLE Automation mechanism and VBScript Scripting Engine used by Internet Explorer. A remote attacker can craft a website to trigger memory corruption, potentially executing arbitrary code in the context of the log...

CVE-2016-3351

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."...

CVE-2016-3247

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."...

CVE-2016-3297

CVE-2016-3297 affects Microsoft Internet Explorer 9–11 and Microsoft Edge. The vulnerability is a memory corruption issue in how browsers handle objects, enabling remote code execution when a user visits a crafted site. Impact could include full user rights compromise; in some contexts memory cor...