CVE-2016-1000046: Microsoft Edge msedge://协议处理RCE漏洞及POC

根据提供的网页截图，这是一个关于 CVE-2016-1000046 漏洞的详细信息页面。以下是关键信息的总结： 漏洞概述 漏洞编号: CVE-2016-1000046 漏洞描述: 在 Microsoft Windows 10 中的 Microsoft Edge 浏览器存在一个漏洞。该漏洞允许攻击者通过利用浏览器中的特定功能（如 协议处理）来执行任意代码或提升权限。具体来说，这是一个涉及 协议处理程序的漏洞，可能导致远程代码执行（RCE）。 严重性: 高危 (High) CVSS 评分: 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) 影响范围 受影响产品: Microsoft Edge (Windows 10) 受影响版本: 版本 38.14393.0 及更早版本 (具体版本号在截图中显示为 ) 受影响组件: 协议处理程序 修复方案 官方补丁: 微软已发布安全更新修复此漏洞。 建议措施: 用户应更新 Microsoft Edge 浏览器到最新版本，或安装最新的安全补丁。 临时缓解措施: 禁用 协议处理程序（如果可能），或限制对不受信任网站的访问。 POC/利用代码 截图中包含了一个名为 协议利用的 Python 脚本（ ），用于演示漏洞。以下是提取的代码： ```python import sys import os import subprocess 检查是否以管理员权限运行 if not os.getuid() == 0: print("请以管理员权限运行此脚本") sys.exit(1) 定义目标 URL target_url = "msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge://msedge:/

目标达成感谢每一位支持者 — 我们达成了 100% 目标！

CVE-2016-1000046: Microsoft Edge msedge://协议处理RCE漏洞及POC

同源更多文章

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

CVE-2016-1000046: Microsoft Edge msedge://协议处理RCE漏洞及POC

同源更多文章

目标达成感谢每一位支持者 — 我们达成了 100% 目标！