Multiple vulnerabilities in Microsoft Edge and Internet Explorer

Beschreibung

Multiple serious vulnerabilities have been found in Microsoft Edge, Microsoft Internet Explorer 9 through 11. Malicious users can exploit these vulnerabilities to execute arbitrary code, make code injections, bypass security restrictions or cause denial of service.

Below is a complete list of vulnerabilities:

1. A scripting engine memory corruption vulnerability can be exploited remotely via a specially designed web site to execute arbitrary code or cause denial of service;
2. A browser memory corruption vulnerability can be exploited remotely via a specially designed web site to execute arbitrary code or cause denial of service;
3. Cross-site scripting vulnerability can be exploited remotely via unspecified vectors to inject arbitrary HTML or web script and obtain sensitive information;
4. Vulnerability in the Web Workers implementation can be exploited remotely via unspecified vectors to bypass the Same Origin Policy and obtain sensitive information.

Ursprüngliche Informationshinweise

• MS16-145

• CVE-2016-7281
• CVE-2016-7280
• CVE-2016-7279
• CVE-2016-7278
• CVE-2016-7297
• CVE-2016-7181
• CVE-2016-7206
• CVE-2016-7296
• CVE-2016-7288
• CVE-2016-7287
• CVE-2016-7286
• CVE-2016-7284
• CVE-2016-7283
• CVE-2016-7282

CVE Liste

• CVE-2016-7281
  critical
• CVE-2016-7280
  critical
• CVE-2016-7279
  critical
• CVE-2016-7278
  critical
• CVE-2016-7297
  critical
• CVE-2016-7181
  critical
• CVE-2016-7206
  critical
• CVE-2016-7296
  critical
• CVE-2016-7288
  critical
• CVE-2016-7287
  critical
• CVE-2016-7286
  critical
• CVE-2016-7284
  critical
• CVE-2016-7283
  critical
• CVE-2016-7282
  critical

KB Liste

• 3205386
• 3205383
• 3203621
• 3205401
• 3205400
• 3205408
• 3205409
• 3207752
• 3205394
• 3206632

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com