Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Microsoft Edge allows malicious websites to execute code or crash your browser

CVE-2016-7243 · published 9 years ago
Summary

An attacker can create a website that can harm your browser, potentially allowing them to take control of your computer or cause it to crash. This issue affects Microsoft Edge. Microsoft will release a fix to address this issue, and in the meantime, it's a good idea to keep your browser and operating system up to date.

What to do
  • Update microsoft microsoft.chakracore to version 1.2.2.
Affected software
Ecosystem VendorProductAffected versions
nuget microsoft microsoft.chakracore < 1.2.2
Fix: upgrade to 1.2.2
– microsoft edge All versions
cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*
Original advisory text
The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting En...
The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7200, CVE-2016-7201, CVE-2016-7202, CVE-2016-7203, CVE-2016-7208, CVE-2016-7240, and CVE-2016-7242.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
7.5 High
Exploitation
15% chance of attack within 30 days
Type
CWE-119Buffer Overflow
Timeline
Published10 Nov 2016
Updated21 Sep 2026
First seen6 Mar 2026
Sources
GHSA-77qc-gp37-hr26 · GHSA
CVE-2016-7243 · NVD
Track software like this
Free during beta