Multiple vulnerabilities in Microsoft Internet Explorer and Edge

Beschreibung

Multiple serious vulnerabilities have been found in Microsoft Internet Explorer and Edge. Malicious users can exploit these vulnerabilities to execute arbitraty code, gain privileges or obtain sensitive information.

Below is a complete list of vulnerabilities

1. An improper memory objects access can be exploited remotely via a specially designed content to execute arbitrary code;
2. An improper input validation before loading libraries can be exploited by logged in attacker via a specially designed application to gain privileges;
3. An improper JavaScript handling can be exploited remotely to obtain sensitive information or gain privileges;
4. Lack of cross-domain policies enforcement can be exploited remotely via a specially designed content to gain privileges.

Ursprüngliche Informationshinweise

• CVE-2016-0154

• CVE-2016-0155
• CVE-2016-0156
• CVE-2016-0157
• CVE-2016-0158
• CVE-2016-0159
• CVE-2016-0160
• CVE-2016-0161
• CVE-2016-0162
• CVE-2016-0164
• CVE-2016-0166

CVE Liste

• CVE-2016-0154
  critical
• CVE-2016-0155
  critical
• CVE-2016-0156
  critical
• CVE-2016-0157
  critical
• CVE-2016-0158
  critical
• CVE-2016-0159
  critical
• CVE-2016-0160
  critical
• CVE-2016-0161
  critical
• CVE-2016-0162
  critical
• CVE-2016-0164
  critical
• CVE-2016-0166
  critical

KB Liste

• 3147461
• 3147458
• 3148198
• 4015549
• 4015550
• 4015221
• 4014661
• 4015551
• 4015219

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com