CVE-2016-0189

CVE-2016-0189 is a critical memory corruption vulnerability affecting the JScript and VBScript engines in Internet Explorer versions 9 through 11. This flaw allows remote attackers to execute arbitrary code or cause a denial of service simply by enticing a user to a crafted website. With a CVSS score of 7.5 (High) and an EPSS score indicating high exploitability, it presents a significant risk due to its network-based attack vector, requiring user interaction but with high impact on confidentiality, integrity, and availability. The vulnerability has been actively exploited in the wild, with public exploit code available in Metasploit and ExploitDB, and has garnered substantial community discussion and media coverage, including its use in exploit kits for ransomware and Trojans.