Multiple vulnerabilities in Microsoft Internet Explorer and Edge

Description

Multiple serious vulnerabilities have been found in Microsoft Internet Explorer & Edge. Malicious users can exploit these vulnerabilities to execute arbitrary code or obtain sensitive information.

Below is a complete list of vulnerabilities

1. An improper memory objects access can be exploited remotely via a specially designed website to execute arbitrary code;
2. An improper referrer policy handling can be exploited remotely via a specially designed website to obtain sensitive information.

Original advisories

• CVE-2016-0130

• CVE-2016-0129
• CVE-2016-0125
• CVE-2016-0124
• CVE-2016-0123
• CVE-2016-0107
• CVE-2016-0103
• CVE-2016-0113
• CVE-2016-0114
• CVE-2016-0111
• CVE-2016-0112
• CVE-2016-0102
• CVE-2016-0110
• CVE-2016-0104
• CVE-2016-0108
• CVE-2016-0106
• CVE-2016-0105
• CVE-2016-0109
• CVE-2016-0116

Exploitation

Public exploits exist for this vulnerability.

Related products

• Microsoft-Internet-Explorer
• Microsoft-Edge

CVE list

• CVE-2016-0130
  critical
• CVE-2016-0129
  critical
• CVE-2016-0125
  warning
• CVE-2016-0124
  critical
• CVE-2016-0123
  critical
• CVE-2016-0107
  critical
• CVE-2016-0103
  critical
• CVE-2016-0113
  critical
• CVE-2016-0114
  critical
• CVE-2016-0111
  critical
• CVE-2016-0112
  critical
• CVE-2016-0102
  critical
• CVE-2016-0110
  critical
• CVE-2016-0104
  critical
• CVE-2016-0108
  critical
• CVE-2016-0106
  critical
• CVE-2016-0105
  critical
• CVE-2016-0109
  critical
• CVE-2016-0116
  critical

KB list

• 3140768
• 3140745
• 3142019
• 3142015
• 3139929

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com