CVE-2016-3203

7.8 highEPSS 33%

High (7.8) in microsoft. EPSS 33% chance of exploitation in the next 30 days.

Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allow remote attackers to execute arbitrary code via a crafted PDF document, aka "Windows PDF Remote Code Execution Vulnerability."

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 33% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2016-06-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:edge
microsoft:windows_10
microsoft:windows_8.1
microsoft:windows_server_2012

References

http://www.securityfocus.com/bid/91086
http://www.securitytracker.com/id/1036099
http://www.zerodayinitiative.com/advisories/ZDI-16-369
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-068
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-080

Check your stack JSON