CVE-2016-0069

Severity: high (CVSS 8.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 18.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-02-18 · updated 2026-06-17
Weakness: CWE-264

Description

Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Internet Explorer Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0068.

Affected products

Microsoft Internet Explorer 11: 9, 10, 11

References

http://jvn.jp/en/jp/JVN78383854/index.html
http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000028.html
http://www.securityfocus.com/bid/82665
http://www.securitytracker.com/id/1034971
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-009
http://jvn.jp/en/jp/JVN78383854/index.html
http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000028.html
http://www.securityfocus.com/bid/82665
http://www.securitytracker.com/id/1034971
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-009

Get alerted when CVE-2016-0069 or the next vulnerability affects your stack