System	Score	Found at
cvssv3.1	8.8
ssvc	Attend

Reference id	Reference type	URL
		https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-129
1037245	Advisory	http://www.securitytracker.com/id/1037245
40785	Exploit	https://www.exploit-db.com/exploits/40785/
40990	Exploit	https://www.exploit-db.com/exploits/40990/
93968	Advisory	http://www.securityfocus.com/bid/93968
CVE-2016-7200;CVE-2016-7201	Exploit	https://github.com/theori-io/chakra-2016-11
Microsoft-Edge-chakra.dll-Information-Leak-Type-Confusion.html	Other	http://packetstormsecurity.com/files/140382/Microsoft-Edge-chakra.dll-Information-Leak-Type-Confusion.html

Data source	Exploit-DB
Date added	Nov. 18, 2016
Description	Microsoft Edge - 'Array.filter' Information Leak
Ransomware campaign use	Known
Source publication date	Nov. 18, 2016
Exploit type	dos
Platform	windows
Source update date	May 18, 2018
Source URL	https://bugs.chromium.org/p/project-zero/issues/detail?id=922

Data source	KEV
Date added	March 28, 2022
Description	The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.
Required action	Apply updates per vendor instructions.
Due date	April 18, 2022
Note	https://nvd.nist.gov/vuln/detail/CVE-2016-7200
Ransomware campaign use	Unknown

No EPSS data available for this advisory.

Patch URL
There are no known patches.

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at None

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

---

Vector: SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-10T16:42:49Z/ Found at None

---