#VU847 Privilege Escalation in Microsoft Internet Explorer and Microsoft Edge - CVE-2016-3388

Vulnerability identifier: #VU847

Vulnerability risk: Low

CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/U:Clear

CVE-ID: CVE-2016-3388

CWE-ID: CWE-46

Exploitation vector: Remote access

Exploit availability: Public exploit is available

Vulnerable software:
Microsoft Internet Explorer
Microsoft Edge

Software vendor:
Microsoft

The vulnerability allows a remote attacker to gain elevated privileges.

The weakness is due to improper defense of private namespace by the browser. A remote attacker can create a specially crafted content, trick the victim into downloading it, gain privileged permissions to the namespace directory on the system.

Successful exploitation of the vulnerability will result in privilege escalation on the vulnerable system.

Install update from vendor's website.

• https://technet.microsoft.com/en-us/library/security/ms16-118
• https://technet.microsoft.com/en-us/library/security/ms16-119