VULNERABILITY INTELLIGENCE

CVE-2016-3382

CVSS score9.3 HIGH

EPSS probability17.03%

CISA KEVNot currently listed

Published2016-10-14

Last modified2026-06-17

Description

The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, as demonstrated by the Chakra JavaScript engine, aka "Scripting Engine Memory Corruption Vulnerability."