CVE-2016-3296

Description

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka Scripting Engine Memory Corruption Vulnerability.

Risk Information

Base Score

7.5

MODERATE

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

23.63

Associated Vulnerability

Vulnerability	OS Platform
Universal Outlook Information Disclosure Vulnerability for Windows 10 for x64-based Systems (KB3176492) - Cumulative	Windows
Universal Outlook Information Disclosure Vulnerability for Windows 10 Version 1511 for x64-based Systems (KB3176493) - Cumulative	Windows
Universal Outlook Information Disclosure Vulnerability for Windows 10 Version 1511 (KB3176493) - Cumulative	Windows
Microsoft Browser Information Disclosure Vulnerability for Windows 10 Version 1607 for x64-based Systems (KB3176495) - Cumulative	Windows
Microsoft Browser Information Disclosure Vulnerability for Windows 10 Version 1607 (KB3176495) - Cumulative	Windows
Universal Outlook Information Disclosure Vulnerability for Windows 10 (KB3176492)	Windows
Vulnerabilities CVE-2016-3296,CVE-2016-3248 are affected in Nuget - Microsoft.ChakraCore 1.2.0	Windows
Vulnerabilities CVE-2016-3296,CVE-2016-3248 are affected in Nuget - Microsoft.ChakraCore for Linux 1.2.0	Linux

Patch Details

Click to see the patches provided by ManageEngine for this CVE

Patch ID	Patch Description
PATCH-21220	Cumulative Update for Windows 10 for x64-based Systems (KB3176492)
PATCH-21222	Cumulative Update for Windows 10 Version 1511 for x64-based Systems (KB3176493)
PATCH-21221	Cumulative Update for Windows 10 Version 1511 (KB3176493)
PATCH-21224	Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB3176495)
PATCH-21223	Cumulative Update for Windows 10 Version 1607 (KB3176495)
PATCH-21219	Cumulative Update for Windows 10 (KB3176492)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234