{"id":"EUVD-2022-2667","enisaUuid":"73fe8841-e58f-302d-9e95-cdd8e0e4d8ed","description":"The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Scripting Engine Memory Corruption Vulnerability,\" a different vulnerability than CVE-2016-7201, CVE-2016-7202, CVE-2016-7203, CVE-2016-7208, CVE-2016-7240, CVE-2016-7242, and CVE-2016-7243.","datePublished":"Nov 10, 2016, 6:16:00 AM","dateUpdated":"Oct 21, 2025, 11:55:48 PM","baseScore":8.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-129\nhttp://packetstormsecurity.com/files/140382/Microsoft-Edge-chakra.dll-Information-Leak-Type-Confusion.html\nhttps://www.exploit-db.com/exploits/40785/\nhttps://github.com/theori-io/chakra-2016-11\nhttp://www.securityfocus.com/bid/93968\nhttps://www.exploit-db.com/exploits/40990/\nhttp://www.securitytracker.com/id/1037245\n","aliases":"CVE-2016-7200\nGHSA-5whg-j5fv-xcm2\n","assigner":"microsoft","epss":82.78,"exploitedSince":"Mar 28, 2022, 12:00:00 AM","enisaIdProduct":[{"id":"efdccaad-ca84-3c7d-ada2-9f4b311a78aa","product":{"name":"n/a","vendor":{"name":"n/a"}},"product_version":"n/a"}],"enisaIdVendor":[{"id":"d0b267fd-60c7-3ec5-aa1c-2385ec1af433","vendor":{"name":"n/a"}}],"enisaIdVulnerability":[{"id":"2f0c5e07-fd20-3d47-8a5b-457c25ca0231","vulnerability":{"id":"GHSA-5whg-j5fv-xcm2","description":"ChakraCore RCE Vulnerability","datePublished":"May 14, 2022, 2:22:42 AM","dateUpdated":"Oct 22, 2025, 5:20:27 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2016-7200\nhttps://github.com/chakra-core/ChakraCore/pull/1982\nhttps://github.com/chakra-core/ChakraCore/commit/c2787ef8fdb7401922e9ec6540e4e5895d11c631\nhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-129\nhttps://github.com/chakra-core/ChakraCore\nhttps://github.com/theori-io/chakra-2016-11\nhttps://web.archive.org/web/20210123184454/http://www.securityfocus.com/bid/93968\nhttps://web.archive.org/web/20211126224744/http://www.securitytracker.com/id/1037245\nhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve\u003dCVE-2016-7200\nhttps://www.exploit-db.com/exploits/40785\nhttps://www.exploit-db.com/exploits/40990\nhttp://packetstormsecurity.com/files/140382/Microsoft-Edge-chakra.dll-Information-Leak-Type-Confusion.html\nhttp://www.securityfocus.com/bid/93968\nhttp://www.securitytracker.com/id/1037245\n","enisa_id":"EUVD-2022-2667\n","aliases":"GHSA-5whg-j5fv-xcm2\nCVE-2016-7200\n","epss":0.0,"dataProcessed":"Nov 15, 2026, 2:17:08 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"7ffbf903-be22-3c9f-9c17-f4fed6d8c0da","vulnerability":{"id":"CVE-2016-7200","description":"The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Scripting Engine Memory Corruption Vulnerability,\" a different vulnerability than CVE-2016-7201, CVE-2016-7202, CVE-2016-7203, CVE-2016-7208, CVE-2016-7240, CVE-2016-7242, and CVE-2016-7243.","datePublished":"Nov 10, 2016, 6:16:00 AM","dateUpdated":"Oct 21, 2025, 11:55:48 PM","status":"PUBLISHED","baseScore":8.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-129\nhttp://packetstormsecurity.com/files/140382/Microsoft-Edge-chakra.dll-Information-Leak-Type-Confusion.html\nhttps://www.exploit-db.com/exploits/40785/\nhttps://github.com/theori-io/chakra-2016-11\nhttp://www.securityfocus.com/bid/93968\nhttps://www.exploit-db.com/exploits/40990/\nhttp://www.securitytracker.com/id/1037245\n","enisa_id":"EUVD-2022-2667\n","assigner":"microsoft","epss":82.78,"dataProcessed":"Nov 15, 2026, 7:18:11 AM","exploitedSince":"Mar 28, 2022, 12:00:00 AM","vulnerabilityProduct":[{"id":"f30fa795-90c3-317a-b9a3-85736b57e827","product":{"name":"n/a","vendor":{"name":"n/a"}},"product_version":"n/a"}],"vulnerabilityVendor":[{"id":"ebbc055f-a409-3dfa-a3f3-7edde6ddeb8d","vendor":{"name":"n/a"}}]}}],"enisaIdAdvisory":[]}