CVE-2016-3295

—

CVSS 3.0

7.5 high

EPSS

15%p97

Published

Sep 14, 2016 (Sep 14, 2016)

Modified

Jun 17, 2026

Description

Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."

Vendors: microsoft
Products: edge, internet explorer
Weakness: CWE-119
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (15.0%)

In the news2 stories

It seems that Internet Explorer and Edge users were in danger for so long

Security AffairsSep 21, 10:29 UTC · Sep 21, 2016Vulnerability CVE-2016-3351 CVE-2016-3295 CVE-2015-0046

Microsoft Patch Tuesday

Cisco TalosSep 14, 00:01 UTC · Sep 14, 2016Vulnerability CVE-2016-3295 CVE-2016-3356 CVE-2016-3357