CVE-2016-7287

CVE-2016-7287 is a memory corruption vulnerability affecting the scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge. This flaw allows remote attackers to execute arbitrary code or cause a denial of service through a specially crafted website. With a CVSS score of 7.5 (High), successful exploitation requires user interaction (UI:R) but can lead to high impact on confidentiality, integrity, and availability (C:H/I:H/A:H) with high attack complexity (AC:H). While not listed in CISA KEV, an ExploitDB entry (EDB-40948) exists, suggesting proof-of-concept code is available. Despite its high EPSS score, there is no evidence of active exploitation, and it has received minimal community discussion or media coverage.