CVE-2016-0189

Published May 11, 2016

Last updated 4 months ago

Exploit knownCVSS high 7.5

Overview

AI description

Automated description summarized from trusted sources.

CVE-2016-0189 is a memory corruption vulnerability affecting the Microsoft JScript 5.8 and VBScript 5.7 and 5.8 engines. These scripting engines are used in various products, including Internet Explorer versions 9 through 11, and were also identified in Microsoft Windows Server 2008/Vista SP2. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service through a specially crafted website. Exploitation of this flaw does not require authentication and can be launched remotely. A public exploit for CVE-2016-0189 was available, and it was reportedly used in targeted attacks, particularly in South Korea.

Description
The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0187.
Source
secure@microsoft.com
NVD status
Analyzed
Products
jscript, vbscript, internet_explorer

Risk scores

CVSS 3.1

Type
Primary
Base score
7.5
Impact score
5.9
Exploitability score
1.6
Vector string
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity
HIGH

CVSS 2.0

Type
Primary
Base score
7.6
Impact score
10
Exploitability score
4.9
Vector string
AV:N/AC:H/Au:N/C:C/I:C/A:C

Known exploits

Data from CISA

Vulnerability name
Microsoft Internet Explorer Memory Corruption Vulnerability
Exploit added on
Mar 28, 2022
Exploit action due
Apr 18, 2022
Required action
Apply updates per vendor instructions.

Weaknesses

nvd@nist.gov
CWE-787
134c704f-9b21-4f2e-91b3-4a467353bcc0
CWE-787

Social media

Hype score
Not currently trending

  1. 10件の脆弱性でランサムウェアによる悪用が確認された。米国サイバーセキュリティ・社会基盤安全保障庁(CISA)の既知の悪用された脆弱性が更新。対象は以下。 - CVE-2025-60710 (Windows) - CVE-2020-29574 (CyberoamOS) - CVE-2

    @__kokumoto

    15 Aug 2026

    2353 Impressions

    1 Retweet

    19 Likes

    10 Bookmarks

    0 Replies

    1 Quote

Configurations

Related CVEs

  1. Microsoft Internet Explorer Remote Code Execution Vulnerability•CVE-2021-27085
  2. Microsoft Internet Explorer Memory Corruption Vulnerability•CVE-2021-26411
  3. <p>An elevation of privilege vulnerability exists in the way that the Wininit.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p> <p>There are multiple ways an attacker could exploit the vulnerability:</p> <ul> <li><p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit this vulnerability and then convince a user to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by getting them to click a link in an email message or in an Instant Messenger message that takes users to the attacker's website, or by opening an attachment sent through email.</p> </li> <li><p>In a file sharing attack scenario, an attacker could provide a specially crafted document file that is designed to exploit this vulnerability, and then convince a user to open the document file.</p> </li> </ul> <p>The security update addresses the vulnerability by ensuring the Wininit.dll properly handles objects in memory.</p>•CVE-2020-1506
  4. <p>An elevation of privilege vulnerability exists in the way that the Wininit.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p> <p>There are multiple ways an attacker could exploit the vulnerability:</p> <ul> <li><p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit this vulnerability and then convince a user to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by getting them to click a link in an email message or in an Instant Messenger message that takes users to the attacker's website, or by opening an attachment sent through email.</p> </li> <li><p>In a file sharing attack scenario, an attacker could provide a specially crafted document file that is designed to exploit this vulnerability, and then convince a user to open the document file.</p> </li> </ul> <p>The security update addresses the vulnerability by ensuring the Wininit.dll properly handles objects in memory.</p>•CVE-2020-1012
  5. Microsoft Edge and Internet Explorer Memory Corruption Vulnerability•CVE-2020-0878

References

Sources include official advisories and independent security research.