CVE-2016-7201

A memory corruption flaw in Microsoft Edge's Chakra engine allowed remote attackers to execute arbitrary code via a malicious website.

This unpatched vulnerability was actively exploited in the wild, enabling remote code execution without requiring user interaction beyond visiting a crafted site. For DIB organizations, this represents a critical exposure where compromised browsers could serve as an entry point for ransomware or data exfiltration, directly impacting compliance with NIST 800-171 controls on remote access and software integrity. Organizations must ensure Edge is patched to the latest version and consider restricting its use on classified networks.

Shame score — A known memory corruption vulnerability in a widely used browser was left unpatched long enough to be actively exploited in the wild, demonstrating a failure to prioritize critical security updates.