CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.8. It affects Microsoft, Java. Its EPSS score suggests a 23.0% probability of exploitation in the next 30 days. It may be remotely exploitable. It may lead to a denial-of-service condition.
CVE
CVE-2016-3248
Severity
HIGH
CVSS
8.8
EPSS
22.96%
Microsoft Java
Original NVD Description
The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 9 through 11, Microsoft Edge, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3259.