← CVE Radar
CVE-2016-7200Microsoft Edge Memory Corruption Vulnerability
The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7201, CVE-2016-7202, CVE-2016-7203, CVE-2016-7208, CVE-2016-7240, CVE-2016-7242, and CVE-2016-7243.
8.8 HIGHEPSS 82.77%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 8.8 | HIGH | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 7.6 | HIGH | 2.0NVD | AV:N/AC:H/Au:N/C:C/I:C/A:C |
CISA required action
⚡ Known exploited · remediation due Apr 18, 2022
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2016-7200
- Status
- Analyzed
- Assigner (CNA)
- microsoft
- Published
- Nov 10, 2016
- Last modified
- 2026-06-17 00:52 UTC
Affected Products
From NVD CPE configurations.
microsoftedge0 version ranges
No version detail published.
References
- packetstormsecurity.com http://packetstormsecurity.com/files/140382/Microsoft-Edge-chakra.dll-Information-Leak-Type-Confusion.html
- securityfocus.com http://www.securityfocus.com/bid/93968
- securitytracker.com http://www.securitytracker.com/id/1037245
- docs.microsoft.com https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-129
- github.com https://github.com/theori-io/chakra-2016-11
- exploit-db.com https://www.exploit-db.com/exploits/40785/
- exploit-db.com https://www.exploit-db.com/exploits/40990/
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-7200