CVE-2016-3207observed exploitation

CVE-2016-3207

Published · Updated

30Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck.

ssvc Attendepss 17%
from disclosure to weapon
Published on NVDJun 16
VulnCheck+1888d
exploitation probability
17%top 3% of all CVEs
observed exploitation
yesVulnCheck
The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3205 and CVE-2016-3206.
Affected products
n/a · n/a
References
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-063https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-069http://www.securitytracker.com/id/1036096http://www.securitytracker.com/id/1036097