CVE-2016-0187

The Microsoft (1) JScript 5.8 and (2) VBScript 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0189.

CVSS v3.0 NVD

7.5 HIGHCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

7.6 HIGHAV:N/AC:H/Au:N/C:C/I:C/A:C

EPSS

21.59% chance of exploitation in the next 30 days, 98th percentile

Published

2016-05-11

Updated

2024-08-05

Proof-of-concept exploits (1)

• nao-sec/RigEK50★ · 2017-05-17

Security advisories

• http://www.securityfocus.com/bid/90011
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-051
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-053

References

• CVE Record
• NVD entry

Related

• CVE-2014-6332
• CVE-2015-2419
• CVE-2016-0189
• CVE-2018-4878