CVE-2016-0186

CVSS 3.0: 7.5 high
EPSS: 19%p97
Published: May 11, 2016 · May 11, 2016
Modified: Jun 17, 2026

Analyze CVE-2016-0186 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0191 and CVE-2016-0193.

Vendors: microsoft

Products: edge

Weakness: CWE-119

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (19.4%)

In the news

1 story

Microsoft Patch Tuesday

Cisco TalosMay 10, 20:39 UTC · May 10, 2016VulnerabilityExploitedCVE-2016-0187 CVE-2016-0189 CVE-2016-0192+283