ID CVE-2016-3198
Summary Microsoft Edge allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via a crafted document, aka "Microsoft Edge Security Feature Bypass."
References
Vulnerable Configurations
  • cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*
CVSS
Base: 4.3 (as of 12-10-2018 - 22:11)
Impact:
Exploitability:
CWE CWE-254
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
cvss-vector via4 AV:N/AC:M/Au:N/C:N/I:P/A:N
msbulletin via4
bulletin_id MS16-068
bulletin_url
date 2016-06-14T00:00:00
impact Remote Code Execution
knowledgebase_id 3163656
knowledgebase_url
severity Critical
title Cumulative Security Update for Microsoft Edge
refmap via4
sectrack 1036099
Last major update 12-10-2018 - 22:11
Published 16-06-2016 - 01:59
Last modified 12-10-2018 - 22:11
Back to Top