CVE-2015-6042

Microsoft Internet Explorer 11 contains a use-after-free vulnerability in the CWindow object implementation that can allow remote code execution or memory corruption via a crafted webpage. Public exploits exist for this class of issue. The vulnerability is addressed by the MS15-106 security updat...

EUVD-2015-5994

Microsoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted web site, as demonstrated by a transition from Low Integrity to Medium Integrity, aka "Internet Explorer Elevation of Privilege Vulnerability."...

CVE-2015-6044

Microsoft Internet Explorer 8 allows remote attackers to gain privileges via a crafted web site, as demonstrated by a transition from Low Integrity to Medium Integrity, aka "Internet Explorer Elevation of Privilege Vulnerability."...

CVE-2015-6051

CVE-2015-6051 affects Microsoft Internet Explorer 10 and 11. The vulnerability is an elevation of privilege caused by an error in how Internet Explorer validates permissions under specific conditions, enabling a crafted website to transition from Low Integrity to Medium (and related privilege lev...

CVE-2015-6050

CVE-2015-6050 is an Internet Explorer memory corruption vulnerability exploited via specially crafted web pages. A remote attacker could execute arbitrary code or cause a denial of service. Affected products span IE 7–11. The issue is addressed by the MS15-106 update; Microsoft released accompany...

CVE-2015-6055

The CVE-2015-6055 issue affects the Microsoft scripting engines used by Internet Explorer (VBScript 5.7/5.8 and JScript 5.7/5.8) and is caused by memory corruption when processing crafted Filter arguments. This can allow remote code execution or memory corruption leading to a DoS; affected produc...

CVE-2015-6053

CVE-2015-6053 affects Microsoft Internet Explorer (versions 7–11); the vulnerability enables remote info disclosure by passing crafted parameters to ArrayBuffer.slice, allowing memory content exposure from the process. The root cause is unsafe handling of parameters in ArrayBuffer.slice within IE...

CVE-2015-6047

The broker EditWith feature in Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the AppContainer protection mechanism and gain privileges via a DelegateExecute launch of an arbitrary application, as demonstrated by a transition from Low Integrity to Medium Integrity, aka...

CVE-2015-6048

Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6049...

CVE-2015-6050

Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...

CVE-2015-6044

CVE-2015-6044 affects Microsoft Internet Explorer 8. An attacker could trigger a remote privilege-escalation by visiting a crafted webpage, enabling a transition from Low to Medium integrity. Publicly documented mitigation is the MS15-106 update (Internet Explorer cumulative security update); app...

CVE-2015-6049

Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6048...

CVE-2015-6056

CVE-2015-6056 is an Internet Explorer scripting engine memory corruption vulnerability affecting IE9–IE11. The issue arises in the JScript/VBScript engines when processing a crafted web page, allowing remote code execution or memory corruption leading to a denial of service. Public exploit activi...

CVE-2015-6052

CVE-2015-6052 covers a security feature bypass in the VBScript 5.7/5.8 and JScript 5.7/5.8 engines used by Internet Explorer 8–11 and other products. A remote attacker could bypass ASLR via a crafted website. The issue is described as a VBScript/JScript ASLR bypass affecting IE components; relate...

CVE-2015-6046

CVE-2015-6046 affects Microsoft Internet Explorer 9–11. A remote attacker can trigger an information-disclosure vulnerability by luring a user to a crafted webpage, allowing access to sensitive data from the browser process memory. Connected sources confirm multiple IE-related vulnerabilities und...

CVE-2015-6047

CVE-2015-6047 affects Microsoft Internet Explorer 8–11 via the broker EditWith feature, enabling remote attackers to bypass AppContainer and escalate privileges (Low to Medium Integrity) by a crafted DelegateExecute launch. The vulnerability is discussed across multiple sources as part of the MS1...

CVE-2015-2482

The Microsoft 1 VBScript 5.7 and 5.8 and 2 JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted replace operation with a JavaScript regular expressio...

CVE-2015-6055

The Microsoft 1 VBScript 5.7 and 5.8 and 2 JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted Filter arguments, aka "Scripting Engine Memory Corrupti...

CVE-2015-6048

CVE-2015-6048 affects Microsoft Internet Explorer 7–11 and is described as allowing remote code execution or a memory corruption denial of service via a crafted website (Internet Explorer Memory Corruption Vulnerability). Connected documents also describe a related IE vulnerability (CVE-2015-6184...

CVE-2015-2482

CVE-2015-2482 affects Microsoft VBScript/JScript engines (VBScript 5.7/5.8 and JScript 5.7/5.8) used in Internet Explorer 8–11 and related products. A crafted replace operation on a JavaScript RegExp can trigger memory corruption, enabling remote code execution or a denial of service. Connected s...