CVE-2016-3296 - The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."

Back Back to CVE browser

HIGH

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."

Published Aug 9, 2016

7.5

HIGH

CVSS 3.0

EPSS 14.87%

Description

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (8)

http://www.securityfocus.com/bid/92283
vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1036569
vdb-entryx_refsource_SECTRACK
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-096
vendor-advisoryx_refsource_MS
https://github.com/advisories/GHSA-5ppx-g65v-4vfv
Advisory
https://github.com/chakra-core/ChakraCore/wiki/Roadmap
https://nvd.nist.gov/vuln/detail/CVE-2016-3296
https://web.archive.org/web/20210116095719/http://www.securitytracker.com/id/1036569
https://web.archive.org/web/20210123160236/http://www.securityfocus.com/bid/92283

Link	Providers	Tags
http://www.securityfocus.com/bid/92283		vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1036569		vdb-entryx_refsource_SECTRACK
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-096		vendor-advisoryx_refsource_MS
https://github.com/advisories/GHSA-5ppx-g65v-4vfv		Advisory
https://github.com/chakra-core/ChakraCore/wiki/Roadmap
https://nvd.nist.gov/vuln/detail/CVE-2016-3296
https://web.archive.org/web/20210116095719/http://www.securitytracker.com/id/1036569
https://web.archive.org/web/20210123160236/http://www.securityfocus.com/bid/92283