Patchwire CVEs, their patch status, and feeds to follow them

CVE-2016-3386

Fixed upstream EPSS 41%

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3389, CVE-2016-7190, and CVE-2016-7194.

Published 2016-10-14 · CVE record · OSV

Products: microsoft edge

Fixed upstream

EcosystemPackageFixed in
NuGetMicrosoft.ChakraCore1.2.1