Vulnerability in Microsoft Internet_explorer

CVE-2016-3324

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."

EPSS: 0.117 (93.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

References

  • 92809 (vdb-entry, x_refsource_BID)
  • MS16-104 (x_refsource_MS, vendor-advisory)
  • 40748 (exploit, x_refsource_EXPLOIT-DB)
  • 1036788 (vdb-entry, x_refsource_SECTRACK)

Frequently asked questions

What is CVE-2016-3324?
CVE-2016-3324 is a high-severity vulnerability in Microsoft Internet_explorer. CVSS score: 8.8/10. Published 2016-09-14.
How severe is CVE-2016-3324?
High severity. CVSS v3 base score is 8.8 out of 10.