Vulnerability detail
Enriched intelligence for a single CVE
High
CVE-2016-7201
PUBLISHEDThe Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory...
- Vendor
- Microsoft
- Product
- Edge
- Published
- Nov 10, 2016
- EPSS
- —
Description
The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7200, CVE-2016-7202, CVE-2016-7203, CVE-2016-7208, CVE-2016-7240, CVE-2016-7242, and CVE-2016-7243.
CVSS scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AV:N/AC:H/Au:N/C:C/I:C/A:C
Exploitation status
Exploited in the wild
Recorded 2022-03-28 00:00:00 UTC · Source
SSVC decision points
- Exploitation
- active
- Automatable
- No
- Technical impact
- total
References
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-129
- http://packetstormsecurity.com/files/140382/Microsoft-Edge-chakra.dll-Information-Leak-Type-Confusion.html
- https://github.com/theori-io/chakra-2016-11
- http://www.securityfocus.com/bid/94038
- https://www.exploit-db.com/exploits/40784/
- https://www.exploit-db.com/exploits/40990/
- http://www.securitytracker.com/id/1037245
Known exploited vulnerability sources
Catalogues that list this CVE as a known exploited vulnerability.
| Source | Added |
|---|---|
| CISA | Mar 28, 2022 |
Timeline
-
CVE ID Reserved
-
CVE Published to Public
-
Added to KEVIntel