CVE-2016-7281

—

CVSS 3.0

5.3 medium

EPSS

14%p96

Published

Dec 20, 2016 (Dec 20, 2016)

Modified

Jun 17, 2026

Description

The Web Workers implementation in Microsoft Internet Explorer 10 and 11 and Microsoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Microsoft Browser Security Feature Bypass Vulnerability."

Vendors: microsoft
Products: edge, internet explorer
Weakness: CWE-254
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (13.7%)

In the news2 stories

Microsoft releases 12 Security Updates; Including 6 Critical Patches

The Hacker NewsDec 15, 00:00 UTC · Dec 15, 2016Vulnerability in the wildCVE-2016-7282 CVE-2016-7281 CVE-2016-7202+1 CVEs

Microsoft Patch Tuesday

Cisco TalosDec 13, 20:00 UTC · Dec 13, 2016Vulnerability CVE-2016-7202 CVE-2016-7279 CVE-2016-7283+40 CVEs