CVE-2015-6168

Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge…

published December 9, 2015

CVSS
—
EPSS
31%
Percentile
98.2
In the wild
Unconfirmed
What it is

🛑 Microsoft Edge could be your browser's worst enemy! A remote attacker can exploit a sneaky memory corruption vulnerability to run malicious code. ⚡ Think of this like a waiter who misplaces an order slip. Instead of getting your food, you might end up with a mystery dish that could be anything — delicious or disastrous! If an attacker successfully exploits this vulnerability, they could gain full control over your system, potentially leading to data theft, unexpected behavior, or a complete denial of service. It’s like serving a surprise dish that leaves your computer gasping for breath!

Put simply

Think of this like a waiter who misplaces an order slip. Instead of getting your food, you might end up with a mystery dish that could be anything — delicious or disastrous! This vulnerability in Microsoft Edge occurs due to a memory corruption flaw, allowing attackers to execute arbitrary code via a specially crafted website. It's as if the browser gets confused and serves up something it shouldn’t!

What to do

If an attacker successfully exploits this vulnerability, they could gain full control over your system, potentially leading to data theft, unexpected behavior, or a complete denial of service. It’s like serving a surprise dish that leaves your computer gasping for breath! To protect yourself, ensure that Microsoft Edge is updated to the latest version. Regularly check for patches and browser updates, and consider running a security suite to monitor for suspicious activity. Don’t let that mystery dish linger! You've got this! Keep your browser up to date, and you'll be able to enjoy the web safely! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.30727 · 98.2th percentile
Published
2015-12-09T11:00Z
EPSS history
Timeline
  • 09 DEC 11:00Z
    Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge…
    cvelistv5