CVE-2015-2397

CVE-2015-2397 refers to a memory corruption vulnerability in Microsoft Internet Explorer (IE) versions 6–11 that can enable remote code execution or a denial of service when a user visits a crafted web page. The issue arises from improper handling of in-memory objects after deletion, per connecte...

CVE-2015-2410

CVE-2015-2410 corresponds to multiple Internet Explorer versions (IE 6–11) information-disclosure vulnerabilities. The core issue is that a crafted stylesheet can cause IE to reveal the existence of local files, enabling an attacker to infer local-file presence. The CVE entry notes an information...

CVE-2015-2401

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1767 and CVE-2015-2408...

CVE-2015-2384

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2383 and CVE-2015-2425...

CVE-2015-2425

Technical details about CVE-2015-2425 are not publicly available in the provided connected documents. Current sources confirm IE11 memory corruption remote code execution vector, but specifics (affected versions, root cause, fixes) are not disclosed here. Monitor for updates.

CVE-2015-2390

CVE-2015-2390 refers to a memory corruption vulnerability in Microsoft Internet Explorer (IE) versions 6–11 that can be triggered by visiting a crafted web page, enabling remote code execution or a memory corruption-induced denial of service. The connected advisories and scanners confirm the issu...

CVE-2015-2419

JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "JScript9 Memory Corruption Vulnerability."...

CVE-2015-1738

The provided connected documents confirm a memory corruption vulnerability in Microsoft Internet Explorer versions 8 and 9, exploitable via a crafted web site that can lead to remote code execution or a denial of service. The root cause details are not explicitly described in the sources, and no ...

CVE-2015-2413

Microsoft Internet Explorer 6 through 11 allows remote attackers to determine the existence of local files via a crafted module-resource request, aka "Internet Explorer Information Disclosure Vulnerability."...

CVE-2015-2384

CVE-2015-2384 is a Microsoft Internet Explorer 11 memory-corruption vulnerability exploitable via a crafted web site, potentially leading to remote code execution or DoS. The connected sources confirm the same class of issue (IE11 memory corruption) and tie this CVE to MS15-065 (Cumulative Securi...

CVE-2015-2413

CVE-2015-2413 affects Microsoft Internet Explorer 6–11. A remote attacker can determine the existence of local files via a crafted module-resource request, an information-disclosure vulnerability arising from how IE handles certain module-resource requests. The public description confirms IE info...

CVE-2015-2385

CVE-2015-2385 affects Microsoft Internet Explorer (IE) versions 6–11. A remote attacker can exploit a memory corruption flaw by enticing a user to load a crafted webpage, potentially allowing arbitrary code execution or a memory-related denial of service. The root cause involves accessing an obje...

CVE-2015-2403

CVE-2015-2403 refers to a memory-corruption vulnerability in Microsoft Internet Explorer 8 that could allow remote code execution or a denial of service when a user visits a crafted webpage. The vulnerability is described consistently across sources as affecting IE/IE8 (and variants across IE ver...

CVE-2015-2404

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2385, CVE-2015-2390, CVE-2015-2397,...

CVE-2015-2419

CVE-2015-2419 is a JScript 9 vulnerability in Microsoft Internet Explorer (IE10/IE11) that allows remote code execution and memory corruption when processing crafted JSON with JSON.stringify. The CVE is exploited via malicious web content and has been leveraged by loaders in exploit kits (notably...

CVE-2015-2389

Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1733 and CVE-2015-2411...

CVE-2015-2398

Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the XSS filter via a crafted attribute of an element in an HTML document, aka "Internet Explorer XSS Filter Bypass Vulnerability."...

CVE-2015-2403

Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...

CVE-2015-2425

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2383 and CVE-2015-2384...

CVE-2015-1729

CVE-2015-1729 corresponds to a cross-domain information disclosure vulnerability in Microsoft Internet Explorer (IE9–IE11). The issue allows a remote attacker to read content from a different domain or zone via a specially crafted web page, due to how IE enforces cross-domain policies. Affected p...