Lucene search
HistoryDec 09, 2015 - 11:59 a.m.
CVE-2015-6139
cve-2015-6139
microsoft
internet explorer
edge
elevation of privilege
vulnerability
remote attack
7 High
AI Score
Confidence
High
9.3 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.011 Low
EPSS
Percentile
84.6%
Microsoft Internet Explorer 11 and Microsoft Edge mishandle content types, which allows remote attackers to execute arbitrary web script in a privileged context via a crafted web site, aka “Microsoft Browser Elevation of Privilege Vulnerability.”
Affected configurations
Node
microsoftedgeMatch-
ORmicrosoftinternet_explorerMatch11-
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:edge | microsoft edge | eq | - |
| microsoft:internet_explorer | microsoft internet explorer | eq | 11 |
Related
symantec
symantec
cvelist
cvelist
CVE-2015-6139
2015-12-09 11:00:00
nvd
nvd
CVE-2015-6139
2015-12-09 11:59:22
checkpoint_advisories
checkpoint_advisories
prion
prion
Privilege escalation
2015-12-09 11:59:00
nessus
nessus
MS15-125: Cumulative Security Update for Microsoft Edge (3116184)
2015-12-08 00:00:00
MS15-124: Cumulative Security Update for Internet Explorer (3116180)
2015-12-08 00:00:00
mskb
mskb
MS15-125: Cumulative Security Update for Microsoft Edge: December 8, 2015
2015-12-08 00:00:00
MS15-124: Cumulative Security Update for Internet Explorer: December 8, 2015
2015-12-08 00:00:00
openvas
openvas
Microsoft Edge Multiple Vulnerabilities (3116184)
2016-01-05 00:00:00
Microsoft Internet Explorer Multiple Vulnerabilities (3116180)
2015-12-09 00:00:00
kaspersky
kaspersky
KLA10720 Multiple vulnerabilities in Microsoft Internet Explorer & Edge
2015-12-08 00:00:00
7 High
AI Score
Confidence
High
9.3 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.011 Low
EPSS
Percentile
84.6%
Related for CVE-2015-6139