CVE-2016-7209 — Improper Input Validation in Microsoft Edge ON Windows 10 FOR 32-bit Systems

CWE-20 — Improper Input Validation5 documents4 sources
Severity
5.3MEDIUMNVD
EPSS
6.8%
top 8.64%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
7
Msrc Microsoft Edge ON Windows 10 FOR 32-bit SystemsMsrc Microsoft Edge ON Windows 10 FOR X64-based SystemsMsrc Microsoft Edge ON Windows 10 Version 1511 FOR 32-bit Systems+4 more
Timeline
PublishedNov 10
Latest updateMay 14

Description

Microsoft Edge allows remote attackers to spoof web content via a crafted web site, aka "Microsoft Edge Spoofing Vulnerability."

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:NExploitability: 1.6 | Impact: 3.6

Affected Packages7 packages

🔴Vulnerability Details

1
GHSA
GHSA-m6m6-4qww-c94x: Microsoft Edge allows remote attackers to spoof web content via a crafted web site, aka "Microsoft Edge Spoofing Vulnerability↗2022-05-14
▶

📋Vendor Advisories

1
Microsoft
Microsoft Browser Spoofing Vulnerability↗2016-11-08
▶

🕵️Threat Intelligence

2
Qualys
Patch Tuesday: Microsoft Patches Actively Exploited Kernel and OpenType Font, Three Previously Disclosed Browser Issues and SQL Server | Qualys↗2016-11-08
▶
Qualys
Patch Tuesday: Microsoft Patches Actively Exploited Kernel and OpenType Font, Three Previously Disclosed Browser Issues and SQL Server↗2016-11-08
▶