CVE-2016-7189

published 2016-10-14

CVE-2016-7189: The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Remote Code…

Priority P2 65 high 7.5 CVSS 3.0

AV N AC H PR N UI R S U C H I H A H

EXPLOIT

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Remote Code Execution Vulnerability."

Detection & IOCs extracted from sources · hover to see the quote

• → Exploit targets Microsoft Edge's Chakra JavaScript engine via Array.join information leak (MS16-119); monitor Edge processes spawning unexpected child processes or executing shellcode after Array.join manipulation ↗
• → Exploit PoC uses Array length manipulation combined with Object.defineProperty getter side-effects to trigger memory disclosure; look for JavaScript patterns setting Array length far beyond initialized elements (e.g., t.length = 100 on a 3-element array) paired with defineProperty getter callbacks ↗
• → Vulnerability is in the Chakra JavaScript engine in Microsoft Edge; scope detection to msedge.exe / chakra.dll crash telemetry or heap corruption events triggered by crafted web pages ↗

• · The exploit-db PoC source is truncated; full exploit payload and any associated IOCs (hashes, URLs, IPs) are not available from the provided sources ↗

CVSS provenance

nvd v3.0 7.5 HIGH CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

nvd v2.0 9.3 CRITICAL AV:N/AC:M/Au:N/C:C/I:C/A:C

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-119