CVE-2016-7202
High · 7.5CVSS
7.5
EPSS
73.3%
Published
Nov 10, 2016
CISA due date
—
The record
The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," as demonstrated by the Chakra JavaScript engine, a different vulnerability than CVE-2016-7200, CVE-2016-7201, CVE-2016-7203, CVE-2016-7208, CVE-2016-7240, CVE-2016-7242, and CVE-2016-7243.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| NuGet | Microsoft.ChakraCore | 0 | 1.2.2 |
Related vulnerabilities
- CVE-2019-0639 A remote code execution vulnerability exists in the way that the ChakraCore scripting… Also affects Microsoft.ChakraCore
- CVE-2019-0568 A remote code execution vulnerability exists in the way that the Chakra scripting engine… Also affects Microsoft.ChakraCore
- CVE-2019-0567 A remote code execution vulnerability exists in the way that the Chakra scripting engine… Also affects Microsoft.ChakraCore
- CVE-2019-0539 A remote code execution vulnerability exists in the way that the Chakra scripting engine… Also affects Microsoft.ChakraCore
- CVE-2018-8624 A remote code execution vulnerability exists in the way that the Chakra scripting engine… Also affects Microsoft.ChakraCore
- CVE-2018-8618 A remote code execution vulnerability exists in the way that the Chakra scripting engine… Also affects Microsoft.ChakraCore
- CVE-2018-8617 A remote code execution vulnerability exists in the way that the Chakra scripting engine… Also affects Microsoft.ChakraCore
- CVE-2018-8629 A remote code execution vulnerability exists in the way that the Chakra scripting engine… Also affects Microsoft.ChakraCore