Security feature bypass

The Web Workers implementation in Microsoft Internet Explorer 10 and 11 and Microsoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Microsoft Browser Security Feature Bypass Vulnerability."...

CVE-2016-7279

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."...

Memory corruption

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."...

Information disclosure

Microsoft Internet Explorer 10 and 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."...

Information disclosure

Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Windows Hyperlink Object Library Information Disclosure Vulnerability."...

CVE-2016-7278

Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Windows Hyperlink Object Library Information Disclosure Vulnerability."...

CVE-2016-7278

Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Windows Hyperlink Object Library Information Disclosure Vulnerability."...

CVE-2016-7283

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...

CVE-2016-7283

CVE-2016-7283 affects Microsoft Internet Explorer 9–11. The vulnerability enables remote code execution or memory corruption via a crafted web site. Affected components include IE’s rendering stack (IEXPLORE/IE frame) and associated DLLs (e.g., Mshtml, Urlmon, Wininet, etc.) across IE9–IE11 on Wi...

CVE-2016-7287

The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."...

CVE-2016-7281

The Web Workers implementation in Microsoft Internet Explorer 10 and 11 and Microsoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Microsoft Browser Security Feature Bypass Vulnerability."...

CVE-2016-7282

Technical details for CVE-2016-7282 are not provided in the connected documents. Public details (affected product/version, root cause, exploit info, and fixes) are not disclosed here; monitor official bulletins for updates.

CVE-2016-7282

Cross-site scripting XSS vulnerability in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Microsoft Browser Information Disclosure Vulnerability."...

CVE-2016-7279

CVE-2016-7279 affects Microsoft Internet Explorer 9–11 and Microsoft Edge, enabling remote code execution or memory corruption via a crafted web site. The vulnerability is listed in OpenVAS feeds among Windows browser vulnerabilities (Edge/IE) and is addressed by Microsoft security updates MS16-1...

CVE-2016-7284

Microsoft Internet Explorer 10 and 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."...

CVE-2016-7281

CVE-2016-7281 affects Microsoft Internet Explorer (IE10/IE11) and Microsoft Edge. The Web Workers implementation allows remote attackers to bypass the Same Origin Policy via unspecified vectors, enabling cross-origin access that should be restricted. Root cause per the description is a security f...

CVE-2016-7287

CVE-2016-7287 is a memory-corruption vulnerability in the scripting engines of Internet Explorer 11 and Microsoft Edge, exploitable via a crafted web site that can lead to remote code execution or memory corruption-based denial of service. Public references confirm exploitation (Exploit-DB entry ...

CVE-2016-7284

CVE-2016-7284 concerns Microsoft Internet Explorer 10/11 information disclosure: a crafted website can cause the browser to reveal sensitive information from process memory. Affected products are Internet Explorer 10 and 11; no exploitation details are provided in the documents beyond the general...

CVE-2016-7278

Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Windows Hyperlink Object Library Information Disclosure Vulnerability."...

CVE-2016-7278

CVE-2016-7278 affects Microsoft Internet Explorer 9–11 and is described as an information-disclosure vulnerability by the Windows Hyperlink Object Library, allowing remote attackers to read memory contents via a crafted web site. Affected product: IE (IE9–IE11). Root cause: information disclosure...