CVE-2016-0024

Published on: 01/12/2016 12:00:00 AM UTC

Last Modified on: 03/23/2021 11:27:12 PM UTC

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Certain versions of Edge from Microsoft contain the following vulnerability:

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka "Scripting Engine Memory Corruption Vulnerability."

  • CVE-2016-0024 has been assigned by [email protected] to track the vulnerability - currently rated as HIGH severity.

CVSS3 Score: 8.8 - HIGH

Attack
Vector
Attack
Complexity
Privileges
Required
User
Interaction
NETWORK LOW NONE REQUIRED
Scope Confidentiality
Impact
Integrity
Impact
Availability
Impact
UNCHANGED HIGH HIGH HIGH

CVSS2 Score: 9.3 - HIGH

Access
Vector
Access
Complexity
Authentication
NETWORK MEDIUM NONE
Confidentiality
Impact
Integrity
Impact
Availability
Impact
COMPLETE COMPLETE COMPLETE

CVE References

Description Tags Link
Microsoft Edge Memory Corruption Flaws Lets Remote Users Execute Arbitrary Code - SecurityTracker www.securitytracker.com
text/html
URL Logo SECTRACK 1034649
Microsoft Edge CVE-2016-0024 Remote Memory Corruption Vulnerability cve.report (archive)
text/html
URL Logo BID 79891
Microsoft Security Bulletin MS16-002 - Critical | Microsoft Docs docs.microsoft.com
text/html
URL Logo MS MS16-002

Known Affected Configurations (CPE V2.3)

Type Vendor Product Version Update Edition Language
ApplicationMicrosoftEdge-AllAllAll
ApplicationMicrosoftEdge-AllAllAll
  • cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*:
  • cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*: