Msrc Microsoft Edge On Windows Server 2016 vulnerabilities

228 known vulnerabilities affecting msrc/microsoft_edge_on_windows_server_2016.

Total CVEs
228
CISA KEV
2
actively exploited
Public exploits
63
Exploited in wild
6
Severity breakdown
CRITICAL1HIGH1MEDIUM219LOW7

Vulnerabilities

Page 12 of 12
CVE-2016-7200MEDIUMCVSS 4.2KEVPoC2016-11-08
CVE-2016-7200 [HIGH] Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the curren
msrc
CVE-2016-7243MEDIUMCVSS 4.22016-11-08
CVE-2016-7243 [HIGH] Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the curren
msrc
CVE-2016-7208MEDIUMCVSS 4.22016-11-08
CVE-2016-7208 [HIGH] Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the curren
msrc
CVE-2016-7240MEDIUMCVSS 4.2PoC2016-11-08
CVE-2016-7240 [HIGH] Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the curren
msrc
CVE-2016-7203MEDIUMCVSS 4.2PoC2016-11-08
CVE-2016-7203 [HIGH] Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the curren
msrc
CVE-2016-7204MEDIUMCVSS 4.32016-11-08
CVE-2016-7204 [LOW] Microsoft Edge Information Disclosure Vulnerability Microsoft Edge Information Disclosure Vulnerability Description: An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory. An attacker who successfully exploited this vulnerability could trick a user into allowing access to the user’s My Documents folder. For an attack to be successful, an attacker must persuade a user to open a malicious website. The update addresses the vulne
msrc
CVE-2016-7209MEDIUMCVSS 5.32016-11-08
CVE-2016-7209 [MEDIUM] Microsoft Browser Spoofing Vulnerability Microsoft Browser Spoofing Vulnerability Description: A spoofing vulnerability exists when Microsoft browsers do not properly parse HTTP content. An attacker who successfully exploited this vulnerability could trick a user by redirecting the user to a specially crafted website. The specially crafted website could either spoof content or serve as a pivot to chain an attack with other vulnerabilities in web services. To exploit the v
msrc
CVE-2016-0024CRITICALCVSS 8.82016-01-12
CVE-2016-0024 [HIGH] Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability Description: A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current us
msrc