CVE-2016-3292

CVE-2016-3292 is the Internet Explorer Elevation of Privilege vulnerability. The connected MS advisories (MS16-104, KB3185319, and related MSRC entries) confirm that Internet Explorer on affected Windows versions mishandles zone and integrity settings, enabling sandbox bypass via a crafted webpag...

CVE-2016-3247

CVE-2016-3247 affects Microsoft Internet Explorer 11 and Microsoft Edge, allowing remote code execution or memory corruption via a crafted web site. The root cause is memory handling in the browser when loading objects, enabling code execution with the attacker’s privileges. In the wild exploits ...

CVE-2016-3351

CVE-2016-3351 is a information-disclosure vulnerability affecting Microsoft Internet Explorer (IE) 9–11 and Microsoft Edge. The issue arises from improper handling of objects in memory by affected scripting engines, which could allow a remote attacker to detect or obtain sensitive files on the us...

CVE-2016-3295

CVE-2016-3295 is the Microsoft Browser Memory Corruption Vulnerability affecting Internet Explorer 10/11 and Microsoft Edge. The issue allows remote attackers to execute arbitrary code or cause a memory corruption-based DoS via a crafted web site. Root cause is memory handling in browser objects,...

Microsoft Internet Explorer and Edge Memory Corruption Vulnerability (CNVD-2016-07604)

Microsoft Internet Explorer IE and Microsoft Edge are both web browsers developed by the American company Microsoft. The former is the default browser that came with operating systems before Windows 10, and the latter is the default browser that comes with the latest operating system, Windows 10....

Microsoft Internet Explorer and Edge Information Disclosure Vulnerability (CNVD-2016-07590)

Microsoft Internet Explorer IE and Microsoft Edge are both web browsers developed by the American company Microsoft. The former is the default browser that came with operating systems before Windows 10, and the latter is the default browser that comes with the latest operating system, Windows 10...

CVE-2016-3325: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."...

CVE-2016-3351: Undefined Security Weakness

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."...

CVE-2016-3375: Improper Restriction of Operations within the Bounds of a Memory Buffer

The OLE Automation mechanism and VBScript scripting engine in Microsoft Internet Explorer 9 through 11, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow remote attackers to...

CVE-2016-3292: Improper Input Validation

Microsoft Internet Explorer 10 and 11 mishandles integrity settings and zone settings, which allows remote attackers to bypass a sandbox protection mechanism via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability."...

CVE-2016-3297: Undefined Security Weakness

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."...

Microsoft Internet Explorer 11.0.9600.18482 Use-After-Free

body background-color:lime; font-color:red; ; / Exploit Title: Internet Explorer 11 Use After Free Date: 05/09/2016 - 11/09/2016 Exploit Author: Marcin Ressel Vendor Homepage: https://www.microsoft.com/pl-pl/ Version: 11.0.9600.18482 Tested on: Windows 7 x64 0:014 g 13a8.9b8: Access violation -...

CVE-2016-3324: Undefined Security Weakness

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...

CVE-2016-3291: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Internet Explorer 11 and Microsoft Edge mishandle cross-origin requests, which allows remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."...

Microsoft Internet Explorer and Edge Information Disclosure Vulnerability (CNVD-2016-07589)

Microsoft Internet Explorer IE and Microsoft Edge are both web browsers developed by the American company Microsoft. The former is the default browser that came with operating systems before Windows 10, and the latter is the default browser that comes with the latest operating system, Windows 10...

Microsoft Internet Explorer and Edge Memory Corruption Vulnerability (CNVD-2016-07605)

Microsoft Internet Explorer IE and Microsoft Edge are both web browsers developed by the American company Microsoft. The former is the default browser that came with operating systems before Windows 10, and the latter is the default browser that comes with the latest operating system, Windows 10....

Microsoft Internet Explorer Security Feature Bypass Vulnerability (CNVD-2016-07602)

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A security feature bypass vulnerability exists in Microsoft IE. An attacker can exploit the vulnerability to bypass malicious websit...

CVE-2016-3353: Undefined Security Weakness

Microsoft Internet Explorer 9 through 11 mishandles .url files from the Internet zone, which allows remote attackers to bypass intended access restrictions via a crafted file, aka "Internet Explorer Security Feature Bypass."...

CVE-2016-3247: Undefined Security Weakness

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."...

CVE-2016-3295: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."...