CVE-2016-3388High

Microsoft Browser Elevation of Privilege Vulnerability

Published
October 11, 2016
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2016-3388 →

📋 Description

An elevation of privilege vulnerability exists when affected Microsoft browsers fail to properly secure private namespace. An attacker who successfully exploited this vulnerability could gain elevated permissions on the namespace directory of a vulnerable system and gain elevated privileges. The vulnerability by itself does not allow arbitrary code to be run. However, this vulnerability could be used in conjunction with one or more other vulnerabilities (e.g. a remote code execution vulnerability and another elevation of privilege) that could take advantage of the elevated privileges when running. The update addresses the vulnerability by correcting how Microsoft browsers handle namespace boundaries.

🎯 Affected products17

  • Internet Explorer 10 on Windows Server 2012
  • Internet Explorer 11 on Windows 10 Version 1511 for 32-bit Systems
  • Internet Explorer 11 on Windows 10 Version 1511 for x64-based Systems
  • Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems
  • Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems
  • Internet Explorer 11 on Windows 10 for 32-bit Systems
  • Internet Explorer 11 on Windows 10 for x64-based Systems
  • Internet Explorer 11 on Windows 8.1 for 32-bit systems
  • Internet Explorer 11 on Windows 8.1 for x64-based systems
  • Internet Explorer 11 on Windows RT 8.1
  • Internet Explorer 11 on Windows Server 2012 R2
  • Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for 32-bit Systems
  • Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for x64-based Systems
  • Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems
  • Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems
  • Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems
  • Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems

✅ Remediation

KB3192440 (Security Update) KB3192441 (Security Update) KB3194798 (Security Update) KB3185332 (Monthly Rollup) KB3192393 (Security Only) KB3185331 (Monthly Rollup) KB3192392 (Security Only)

🔗 References (8)