CVE-2016-0077

MEDIUM

Microsoft IE 9-11 & Edge - XSS

Title source: llm

Description

Microsoft Internet Explorer 9 through 11 and Microsoft Edge misparse HTTP responses, which allows remote attackers to spoof web sites via a crafted URL, aka "Microsoft Browser Spoofing Vulnerability."

References (4)

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1034971

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1034972

[Vendor Advisory] https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-009

[Vendor Advisory] https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-011

Scores

CVSS v3 4.3

EPSS 0.0936

EPSS Percentile 92.7%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Classification

CWE

CWE-19

Status draft

Affected Products (4)

microsoft/edge

microsoft/internet_explorer

Timeline

Published Feb 10, 2016

Tracked Since Feb 18, 2026