Description
The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0187.
Published: 2016-05-11
Score: 7.5 High
EPSS: 91.3% High
KEV: Yes
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 22 Oct 2025 00:30:00 +0000


Tue, 21 Oct 2025 20:30:00 +0000


Tue, 21 Oct 2025 19:30:00 +0000


Mon, 10 Feb 2025 17:15:00 +0000

Type Values Removed Values Added
Metrics kev

{'dateAdded': '2022-03-28'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Subscriptions

Microsoft Internet Explorer Jscript Vbscript Windows 10 1507 Windows 10 1511 Windows 7 Windows 8.1 Windows Rt 8.1 Windows Server 2008 Windows Server 2012 Windows Vista
cve-icon MITRE

Status: PUBLISHED

Assigner: microsoft

Published:

Updated: 2025-10-21T23:55:52.367Z

Reserved: 2015-12-04T00:00:00.000Z

Link: CVE-2016-0189

cve-icon Vulnrichment

Updated: 2024-08-05T22:08:13.349Z

cve-icon NVD

Status : Deferred

Published: 2016-05-11T01:59:30.537

Modified: 2025-10-22T00:15:47.703

Link: CVE-2016-0189

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses