ID CVE-2016-0158
Summary Microsoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Microsoft Edge Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0161.
References
Vulnerable Configurations
  • cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*
CVSS
Base: 4.3 (as of 12-10-2018 - 22:11)
Impact:
Exploitability:
CWE CWE-254
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
cvss-vector via4 AV:N/AC:M/Au:N/C:N/I:P/A:N
msbulletin via4
bulletin_id MS16-038
bulletin_url
date 2016-04-12T00:00:00
impact Remote Code Execution
knowledgebase_id 3148532
knowledgebase_url
severity Critical
title Cumulative Security Update for Microsoft Edge
refmap via4
misc http://www.zerodayinitiative.com/advisories/ZDI-16-233
sectrack 1035522
Last major update 12-10-2018 - 22:11
Published 12-04-2016 - 23:59
Last modified 12-10-2018 - 22:11
Back to Top