CVE-2016-3211

CVE-2016-3211 and related entries describe memory corruption vulnerabilities in Microsoft Internet Explorer 9–11 that allow remote code execution or denial of service via crafted web sites. Connected sources tie CVE-2016-0199 (IE9–11) and CVE-2016-0200 to an IE11 garbage collector/attribute type ...

CVE-2016-3206

The Microsoft 1 JScript 5.8 and 2 VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption...

CVE-2016-3202

The Microsoft 1 Chakra JavaScript, 2 JScript, and 3 VBScript engines, as used in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruptio...

CVE-2016-3210

CVE-2016-3210 is the Scripting Engine Memory Corruption Vulnerability affecting Microsoft Internet Explorer 11 JScript and VBScript engines. Public sources (NVD/MS16-063) describe remote code execution or memory corruption via a crafted webpage, allowing an attacker to execute arbitrary code in t...

CVE-2016-3212

CVE-2016-3212: Internet Explorer XSS Filter Vulnerability. Affected: IE 9–11 on Windows platforms; root cause: IE XSS Filter fails to properly identify JavaScript, enabling remote XSS via crafted sites. Impact: potential remote code execution through IE when processing malicious content (per Micr...

CVE-2016-3210

The Microsoft 1 JScript and 2 VBScript engines, as used in Internet Explorer 11, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."...

CVE-2016-0200

CVE-2016-0200 affects Microsoft Internet Explorer 9–11, enabling remote code execution or memory corruption via a crafted web site. Related entries (CVE-2016-0199, CVE-2016-3211) describe similar IE memory corruption vulnerabilities and MS16-063 coverage; no explicit remediation details for CVE-2...

CVE-2016-0199

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0200 and CVE-2016-3211...

CVE-2016-3212

The XSS Filter in Microsoft Internet Explorer 9 through 11 does not properly identify JavaScript, which makes it easier for remote attackers to conduct cross-site scripting XSS attacks via a crafted web site, aka "Internet Explorer XSS Filter Vulnerability."...

CVE-2016-3207

CVE-2016-3207 corresponds to a memory corruption vulnerability in Microsoft’s scripting engines (JScript 5.8 and VBScript 5.7/5.8) used by Internet Explorer 9–11 and related products. The issue allows remote code execution or denial of service via a crafted web site. Connected Microsoft KB/MSRC e...

CVE-2016-3205

The Microsoft 1 JScript 5.8 and 2 VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption...

CVE-2016-3207

The Microsoft 1 JScript 5.8 and 2 VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption...

EUVD-2016-4251

The XSS Filter in Microsoft Internet Explorer 9 through 11 does not properly identify JavaScript, which makes it easier for remote attackers to conduct cross-site scripting XSS attacks via a crafted web site, aka "Internet Explorer XSS Filter Vulnerability."...

CVE-2016-0200

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0199 and CVE-2016-3211...

CVE-2016-3202

CVE-2016-3202 affects the Chakra JavaScript, JScript, and VBScript engines used by Internet Explorer 10/11 and Microsoft Edge. The vulnerability allows remote attackers to execute arbitrary code or cause memory corruption via a crafted web site (Scripting Engine Memory Corruption Vulnerability). ...

KLA10832 Obsolete Adobe Flash Player for Windows

Microsoft released update to address vulnerabilities in Flash Player for Internet explorer. For details look at KLA10830. Technical details To mitigate this vulnerability you can implement some of workarounds listed in original Microsoft advisory: disable Adobe Flash Player, prevent Adobe FP from...

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CNVD-2016-04077)

Microsoft Internet Explorer IE is a Web browser developed by Microsoft, and is the default browser that comes with the Windows operating system.JScript is one of the interpreted object-based scripting languages; VBScript Visual Basic Script is one of the scripting languages, and is also the defau...

Microsoft Internet Explorer PerformDoDragDrop Protected Mode Sandbox Escape Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the usage o...

PT-2016-3127 · Microsoft +4 · Internet Explorer +5

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 21.0.0.242 and earlier Description: The issue is related to errors in the code of Adobe Flash Player libraries used in Microsoft Internet Explorer 10 and 11 and Microsoft Edge. Exploitation of this issue may allow ...

Microsoft Scripting Engine Memory Corruption Vulnerability

Microsoft Internet Explorer IE and Microsoft Edge are web browsers developed by Microsoft Corporation. The former is the default browser that comes with the operating system before Windows 10, and the latter is the default browser that comes with the latest operating system, Windows 10. JScript i...