Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA12171
HistoryMay 11, 2021 - 12:00 a.m.

KLA12171 ACE vulnerability in Microsoft Browser

2021-05-1100:00:00
Kaspersky Lab
threats.kaspersky.com
25

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.94 High

EPSS

Percentile

99.1%

JSON

Detect date:

05/11/2021

Severity:

Critical

Description:

A memory corruption vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to execute arbitrary code.

Exploitation:

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Affected products:

Internet Explorer 9
Internet Explorer 11

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

CVE-2021-26419

Impacts:

ACE

Related products:

Microsoft Internet Explorer

CVE-IDS:

CVE-2021-264197.5Critical

Microsoft official advisories:

KB list:

5003233
5003165
5003209
5003197
5003174
5003208
5003171
5003172
5003169
5003173

Related

checkpoint_advisories 1
packetstorm 1
mscve 1
cve 1
zdt 1
mskb 11
prion 1
nessus 9
attackerkb 1
googleprojectzero 1
krebs 1
malwarebytes 1
thn 1
openvas 8
kaspersky 1
threatpost 1
avleonov 1
rapid7blog 1
qualysblog 1
checkpoint_advisories
checkpoint_advisories
Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2021-26419)
2021-05-11 00:00:00
packetstorm
packetstorm
Internet Explorer jscript9.dll Memory Corruption
2021-05-13 00:00:00
mscve
mscve
Scripting Engine Memory Corruption Vulnerability
2021-05-11 07:00:00
cve
cve
CVE-2021-26419
2021-05-11 19:15:00
zdt
zdt
Microsoft Internet Explorer jscript9.dll Memory Corruption Exploit
2021-05-13 00:00:00
mskb
mskb
KB5003165: Cumulative security update for Internet Explorer: May 11, 2021
2021-05-11 07:00:00
May 11, 2021—KB5003210 (Monthly Rollup)
2021-05-11 07:00:00
May 11, 2021—KB5003208 (Monthly Rollup)
2021-05-11 07:00:00
prion
prion
Memory corruption
2021-05-11 19:15:00
nessus
nessus
Security Updates for Internet Explorer (May 2021)
2021-05-11 00:00:00
KB5003210: Windows Server 2008 Security Update (May 2021)
2021-05-11 00:00:00
KB5003209: Windows 8.1 and Windows Server 2012 R2 Security Update (May 2021)
2021-05-11 00:00:00
attackerkb
attackerkb
CVE-2021-26419
2021-05-11 00:00:00
googleprojectzero
googleprojectzero
Fuzzing Closed-Source JavaScript Engines with Coverage Feedback
2021-09-14 00:00:00
krebs
krebs
Microsoft Patch Tuesday, May 2021 Edition
2021-05-11 20:28:19
malwarebytes
malwarebytes
Get patching! Wormable Windows flaw headlines Patch Tuesday
2021-05-12 12:46:09
thn
thn
Latest Microsoft Windows Updates Patch Dozens of Security Flaws
2021-05-12 09:15:00
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB5003233)
2021-05-12 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5003209)
2021-05-12 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5003197)
2021-05-12 00:00:00
kaspersky
kaspersky
KLA12167 Multiple vulnerabilities in Microsoft Products (ESU)
2021-05-11 00:00:00
threatpost
threatpost
Wormable Windows Bug Opens Door to DoS, RCE
2021-05-11 20:05:44
avleonov
avleonov
Vulristics: Microsoft Patch Tuesdays Q2 2021
2021-07-10 00:14:59
rapid7blog
rapid7blog
Patch Tuesday - May 2021
2021-05-11 23:44:00
qualysblog
qualysblog
Microsoft & Adobe Patch Tuesday (May 2021) – Qualys covers 85 Vulnerabilities, 26 Critical
2021-05-11 21:53:37

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.94 High

EPSS

Percentile

99.1%

JSON
Related for KLA12171
checkpoint_advisories1packetstorm1mscve1cve1zdt1mskb11prion1nessus9attackerkb1googleprojectzero1krebs1malwarebytes1thn1openvas8kaspersky1threatpost1avleonov1rapid7blog1qualysblog1