{"id":"EUVD-2022-2363","enisaUuid":"4b478547-6eb3-32de-8d3a-788e53f8749d","description":"The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Scripting Engine Memory Corruption Vulnerability,\" a different vulnerability than CVE-2016-7200, CVE-2016-7202, CVE-2016-7203, CVE-2016-7208, CVE-2016-7240, CVE-2016-7242, and CVE-2016-7243.","datePublished":"Nov 10, 2016, 6:16:00 AM","dateUpdated":"Oct 21, 2025, 11:55:48 PM","baseScore":8.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-129\nhttp://packetstormsecurity.com/files/140382/Microsoft-Edge-chakra.dll-Information-Leak-Type-Confusion.html\nhttps://github.com/theori-io/chakra-2016-11\nhttp://www.securityfocus.com/bid/94038\nhttps://www.exploit-db.com/exploits/40784/\nhttps://www.exploit-db.com/exploits/40990/\nhttp://www.securitytracker.com/id/1037245\n","aliases":"CVE-2016-7201\nGHSA-4f5g-j7wg-7w8j\n","assigner":"microsoft","epss":80.0,"exploitedSince":"Mar 28, 2022, 12:00:00 AM","enisaIdProduct":[{"id":"16effe92-2f70-366e-a825-0122ad52972c","product":{"name":"n/a","vendor":{"name":"n/a"}},"product_version":"n/a"}],"enisaIdVendor":[{"id":"560a54d3-5cdf-35f2-9c70-7d03b606a997","vendor":{"name":"n/a"}}],"enisaIdVulnerability":[{"id":"42296554-fe81-3c36-9d80-33bd9d82a621","vulnerability":{"id":"CVE-2016-7201","description":"The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Scripting Engine Memory Corruption Vulnerability,\" a different vulnerability than CVE-2016-7200, CVE-2016-7202, CVE-2016-7203, CVE-2016-7208, CVE-2016-7240, CVE-2016-7242, and CVE-2016-7243.","datePublished":"Nov 10, 2016, 6:16:00 AM","dateUpdated":"Oct 21, 2025, 11:55:48 PM","status":"PUBLISHED","baseScore":8.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-129\nhttp://packetstormsecurity.com/files/140382/Microsoft-Edge-chakra.dll-Information-Leak-Type-Confusion.html\nhttps://github.com/theori-io/chakra-2016-11\nhttp://www.securityfocus.com/bid/94038\nhttps://www.exploit-db.com/exploits/40784/\nhttps://www.exploit-db.com/exploits/40990/\nhttp://www.securitytracker.com/id/1037245\n","enisa_id":"EUVD-2022-2363\n","assigner":"microsoft","epss":80.0,"dataProcessed":"Nov 13, 2026, 7:18:28 AM","exploitedSince":"Mar 28, 2022, 12:00:00 AM","vulnerabilityProduct":[{"id":"6f128fbd-f478-3236-b565-b2946b02c5e4","product":{"name":"n/a","vendor":{"name":"n/a"}},"product_version":"n/a"}],"vulnerabilityVendor":[{"id":"ea34b64d-7416-39cf-8fe8-6e53a536848b","vendor":{"name":"n/a"}}]}},{"id":"9bf71ff3-2942-353f-8689-21ec7c03c6d9","vulnerability":{"id":"GHSA-4f5g-j7wg-7w8j","description":"ChakraCore RCE Vulnerability","datePublished":"May 14, 2022, 2:22:42 AM","dateUpdated":"Oct 22, 2025, 5:20:06 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2016-7201\nhttps://github.com/chakra-core/ChakraCore/pull/1982\nhttps://github.com/chakra-core/ChakraCore/commit/c2787ef8fdb7401922e9ec6540e4e5895d11c631\nhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-129\nhttps://github.com/chakra-core/ChakraCore\nhttps://github.com/theori-io/chakra-2016-11\nhttps://web.archive.org/web/20210123185125/http://www.securityfocus.com/bid/94038\nhttps://web.archive.org/web/20211126224744/http://www.securitytracker.com/id/1037245\nhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve\u003dCVE-2016-7201\nhttps://www.exploit-db.com/exploits/40784\nhttps://www.exploit-db.com/exploits/40990\nhttp://packetstormsecurity.com/files/140382/Microsoft-Edge-chakra.dll-Information-Leak-Type-Confusion.html\nhttp://www.securityfocus.com/bid/94038\nhttp://www.securitytracker.com/id/1037245\n","enisa_id":"EUVD-2022-2363\n","aliases":"GHSA-4f5g-j7wg-7w8j\nCVE-2016-7201\n","epss":0.0,"dataProcessed":"Nov 8, 2026, 1:49:57 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}