Multiple vulnerabilities in Microsoft Internet Explorer and Edge

Описание

Multiple serious vulnerabilities have been found in Microsoft Internet Explorer & Edge. Malicious users can exploit these vulnerabilities to execute arbitrary code or obtain sensitive information.

Below is a complete list of vulnerabilities

1. An improper memory objects access can be exploited remotely via a specially designed website to execute arbitrary code;
2. An improper referrer policy handling can be exploited remotely via a specially designed website to obtain sensitive information.

Первичный источник обнаружения

• CVE-2016-0130
  CVE-2016-0129
  CVE-2016-0125
  CVE-2016-0124
  CVE-2016-0123
  CVE-2016-0107
  CVE-2016-0103
  CVE-2016-0113
  CVE-2016-0114
  CVE-2016-0111
  CVE-2016-0112
  CVE-2016-0102
  CVE-2016-0110
  CVE-2016-0104
  CVE-2016-0108
  CVE-2016-0106
  CVE-2016-0105
  CVE-2016-0109
  CVE-2016-0116
  

Эксплуатация

Public exploits exist for this vulnerability.

Связанные продукты

• Microsoft-Internet-Explorer
• Microsoft-Edge

Список CVE

• CVE-2016-0130
  critical
• CVE-2016-0129
  critical
• CVE-2016-0125
  warning
• CVE-2016-0124
  critical
• CVE-2016-0123
  critical
• CVE-2016-0107
  critical
• CVE-2016-0103
  critical
• CVE-2016-0113
  critical
• CVE-2016-0114
  critical
• CVE-2016-0111
  critical
• CVE-2016-0112
  critical
• CVE-2016-0102
  critical
• CVE-2016-0110
  critical
• CVE-2016-0104
  critical
• CVE-2016-0108
  critical
• CVE-2016-0106
  critical
• CVE-2016-0105
  critical
• CVE-2016-0109
  critical
• CVE-2016-0116
  critical

Список KB

• 3140768
• 3140745
• 3142019
• 3142015
• 3139929

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com