Description
The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0187.
Published: 2016-05-11
Score: 7.5 High
EPSS: 91.1% High
KEV: Yes
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 22 Oct 2025 00:30:00 +0000


Tue, 21 Oct 2025 20:30:00 +0000


Tue, 21 Oct 2025 19:30:00 +0000


Mon, 10 Feb 2025 17:15:00 +0000

Type Values Removed Values Added
Metrics kev

{'dateAdded': '2022-03-28'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Subscriptions

Microsoft Internet Explorer Jscript Vbscript Windows 10 1507 Windows 10 1511 Windows 7 Windows 8.1 Windows Rt 8.1 Windows Server 2008 Windows Server 2012 Windows Vista
cve-icon MITRE

Status: PUBLISHED

Assigner: microsoft

Published:

Updated: 2025-10-21T23:55:52.367Z

Reserved: 2015-12-04T00:00:00.000Z

Link: CVE-2016-0189

cve-icon Vulnrichment

Updated: 2024-08-05T22:08:13.349Z

cve-icon NVD

Status : Analyzed

Published: 2016-05-11T01:59:30.537

Modified: 2026-04-22T16:31:49.983

Link: CVE-2016-0189

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses