| CVE Number | Vulnerability | Product | Severity | Date |
|---|---|---|---|---|
| MS16-096 | Cumulative Security Update for Microsoft Edge (3177358) | Microsoft Edge | Critical | 10-08-2016 |
Technical Information
Brief overview of the risk:
This security update resolves vulnerabilities in Microsoft Edge. The most severe of the vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Microsoft Edge.
Detailed Information on the risk:
Multiple remote code execution vulnerabilities exist when Microsoft Edge improperly accesses objects in memory. The vulnerabilities could corrupt memory in a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker could host a specially crafted website that is designed to exploit the vulnerabilities through Microsoft Edge, and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements by adding specially crafted content that could exploit the vulnerabilities.
Microsoft EdgeFurther information on this exploit is available at : MS16-096