VULNERABILITY INTELLIGENCE

CVE-2016-3377

CVSS score7.6 HIGH

EPSS probability15.32%

CISA KEVNot currently listed

Published2016-09-14

Last modified2026-06-17

Description

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3350.