CVE-2016-3241

CVE-2016-3241 concerns Microsoft Internet Explorer 9–11. The provided documents describe a memory corruption vulnerability that allows remote code execution or a denial of service via a crafted web site. The sources do not specify the exact vulnerable component/version details beyond IE9–IE11 and...

CVE-2016-3261

CVE-2016-3261 is an Information Disclosure vulnerability in Internet Explorer 11. It arises when IE11 improperly handles page content in memory, enabling remote attackers to obtain sensitive information via a crafted web site or web content. Public disclosures and Microsoft’s MS16-084 security up...

CVE-2016-3261

Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."...

CVE-2016-3240

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3241 and CVE-2016-3242...

CVE-2016-3243

CVE-2016-3243 affects Microsoft Internet Explorer 10 and 11. The vulnerability arises from improper handling of memory objects, enabling remote attackers to execute arbitrary code or cause a denial of service (memory corruption) by convincing a user to view a crafted site. Public sources consiste...

CVE-2016-3245

CVE-2016-3245 affects Internet Explorer 9–11. It is a security feature bypass that lets remote attackers trick users into connecting to a restricted TCP port via a crafted web page. The vulnerability impacts multiple Windows IE versions and is addressed by Microsoft in MS16-084 (security update K...

CVE-2016-3276

CVE-2016-3276 affects Microsoft Internet Explorer 11 and Microsoft Edge. A remote attacker can trigger a content-spoofing attack by sending or hosting a specially crafted URL, potentially convincing users to visit a malicious page after user interaction (clicking the URL). Exploitation scenarios ...

CVE-2016-3273

CVE-2016-3273 is a browser information disclosure vulnerability in the XSS Filter of Microsoft Internet Explorer 9–11 and Microsoft Edge. The root cause is improper restriction of JavaScript by the XSS Filter, allowing remote attackers to obtain sensitive information via a crafted website. The is...

CVE-2016-3260

The CVE-2016-3260 issue affects Microsoft’s scripting engines (JScript 9, VBScript, and Chakra) used by Internet Explorer 11 and Microsoft Edge. A memory corruption flaw in the engines could allow remote code execution or a denial of service when processing a crafted web site, as described in the...

CVE-2016-3260

The Microsoft 1 JScript 9, 2 VBScript, and 3 Chakra JavaScript engines, as used in Microsoft Internet Explorer 11, Microsoft Edge, and other products, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memo...

CVE-2016-3240

The CVE-2016-3240 issue affects Microsoft Internet Explorer 9–11, described as a memory corruption vulnerability triggered by a crafted web site that can lead to remote code execution or a denial of service. The connected documents confirm IE 9–11 as the affected product and the memory corruption...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2016-04844)

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A memory corruption vulnerability exists in Microsoft IE versions 9 to 11, which arises from a program failing to properly access...

Microsoft Scripting Engine Memory Corruption Vulnerability (CNVD-2016-04792)

Microsoft Internet Explorer IE is a web browser developed by Microsoft, and is the default browser that comes with the Windows operating system.Microsoft VBScript known as Visual Basic Script is a scripting language, and is also the default programming language for ASP dynamic web pages. JScript ...

CVE-2016-3240: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3241 and CVE-2016-3242...

CVE-2016-3261: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."...

Microsoft Internet Explorer and Edge Memory Corruption Vulnerability

Microsoft Internet Explorer IE and Microsoft Edge are both web browsers developed by the American company Microsoft. The former is the default browser that came with operating systems before Windows 10, and the latter is the default browser that comes with the latest operating system, Windows 10....

CVE-2016-3241: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3240 and CVE-2016-3242...

CVE-2016-3276: Improper Access Control

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to conduct content-spoofing attacks via a crafted URL, aka "Microsoft Browser Spoofing Vulnerability."...

CVE-2016-3242: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3240 and CVE-2016-3241...

Microsoft Internet Explorer Security Feature Bypass Vulnerability

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A restricted port security feature bypass vulnerability exists in Microsoft IE versions 9 through 11. A remote attacker could exploi...