The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3214.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause
    a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption
    Vulnerability," a different vulnerability than CVE-2016-3214. (CVE-2016-3199)

The version of Microsoft Edge installed on the remote Windows host is missing Cumulative Security Update 3163656. It is, therefore, affected by multiple vulnerabilities :

  - A security feature bypass vulnerability exists due to a     failure to properly validate specially crafted     documents. An unauthenticated, remote attacker can     exploit this vulnerability by convincing a user to load     a page or visit a website containing malicious content,     allowing the attacker to bypass the Edge Content     Security Policy (CSP). (CVE-2016-3198)

  - Multiple remote code execution vulnerabilities exist in     the Chakra JavaScript engine due to improper handling of     objects in memory. An unauthenticated, remote attacker     can exploit these vulnerabilities by convincing a user     to visit a specially crafted website or open a specially     crafted Microsoft Office document that hosts the Edge     rendering engine, resulting in the execution of     arbitrary code in the context of the current user.
    (CVE-2016-3199, CVE-2016-3202, CVE-2016-3214,     CVE-2016-3222)

  - Multiple information disclosure vulnerabilities exist     due to improper parsing of .pdf files. An     unauthenticated, remote attacker can exploit these     vulnerabilities by convincing a user to open a specially     crafted .pdf file, resulting in the disclosure of     sensitive information in the context of the current     user. (CVE-2016-3201, CVE-2016-3215)

  - A remote code execution vulnerability exists due to     improper parsing of .pdf files. An unauthenticated,     remote attacker can exploit this vulnerability by     convincing a user to open a specially crafted .pdf file,     resulting in the execution of arbitrary code in the     context of the current user. (CVE-2016-3203)

Note that CVE-2016-3214, CVE-2016-3215, and CVE-2016-3222 only affect Windows 10 version 1511.

ID	Name	Product	Family	Type	Severity
431798	SCA: security update for Microsoft.ChakraCore (GHSA-vfjw-crcq-q92v)	Tenable Cloud Security	SCA Checks	Local	high
431798	SCA: security update for Microsoft.ChakraCore (GHSA-vfjw-crcq-q92v)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
91597	MS16-068: Cumulative Security Update for Microsoft Edge (3163656)	Nessus	Windows : Microsoft Bulletins	Local	high

Detections

Analytics

CVE-2016-3199

high

Tenable Plugins

high

high

high