Technical Information

Brief overview of the risk:
This security update resolves vulnerabilities in . The most severe of the vulnerabilities could allow remote code execution if a user views a specially crafted webpage using .
Detailed Information on the risk:
Multiple remote code execution vulnerabilities exist in the way that Microsoft browsers handles objects in memory. The vulnerabilities could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user.
In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerabilities through Microsoft browsers and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerabilities.Further information on this exploit is available at : MS16-129