CVE-2015-2421

CVE-2015-2421 is a Microsoft Internet Explorer ASLR bypass affecting IE 6–11. The root cause is memory/ASLR handling allowing remote code execution via a crafted webpage. The issue is addressed by security update MS15-065, which covers IE vulnerabilities and requires applying the update for affec...

CVE-2015-2410

Microsoft Internet Explorer 6 through 11 allows remote attackers to determine the existence of local files via a crafted stylesheet, aka "Internet Explorer Information Disclosure Vulnerability."...

CVE-2015-1767

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2401 and CVE-2015-2408...

CVE-2015-2402

Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability."...

CVE-2015-2402

CVE-2015-2402 affects Microsoft Internet Explorer 7–11. Description states a remote attacker can gain privileges via a crafted webpage (Internet Explorer Elevation of Privilege). Public records reference the MS15-065 security update (KB3076321, with related updates KB3065822/KB3076321) as remedia...

CVE-2015-2404

Microsoft Internet Explorer (IE) versions 6–11 are affected by a memory corruption vulnerability exploitable via a crafted web page, potentially allowing remote code execution or memory corruption-driven denial of service. The CVE-2015-2404 entry is among a set addressed by MS15-065 (Cumulative S...

CVE-2015-2412

Microsoft Internet Explorer 10 and 11 allows remote attackers to read arbitrary local files via a crafted pathname, aka "Internet Explorer Information Disclosure Vulnerability."...

CVE-2015-2389

Summary of findings: CVE-2015-2389 affects Microsoft Internet Explorer 10 and 11. The vulnerability is a memory corruption issue triggered by visiting a crafted website, enabling remote code execution or a denial of service. The issue is part of a set of IE memory corruption vulnerabilities from ...

CVE-2015-2421

Microsoft Internet Explorer 6 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass."...

CVE-2015-2383

CVE-2015-2425, as documented in the CVE list and CIRCL sightings, is a memory-corruption vulnerability in Microsoft Internet Explorer 11 that allows remote attackers to run arbitrary code or cause a denial of service by presenting a crafted web site. The issue is explicitly described as distinct ...

CVE-2015-2385

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2390, CVE-2015-2397, CVE-2015-2404,...

CVE-2015-1738

Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2388...

CVE-2015-2388

Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1738...

CVE-2015-2398

CVE-2015-2398 affects Microsoft Internet Explorer 8–11, enabling remote attackers to bypass the XSS filter via a crafted HTML attribute. The issue is tied to multiple vendor advisories and was addressed by MS15-065 security update; see KB3065822 and related patches (e.g., 3076321) for affected OS...

CVE-2015-2411

Microsoft Internet Explorer 10 and 11 are affected by memory corruption vulnerabilities described under CVE-2015-2411 (and related CVEs). The publicly documented details indicate that a crafted website can trigger remote code execution or a denial of service via memory corruption in IE’s handling...

CVE-2015-2414

CVE-2015-2414 affects Microsoft Internet Explorer 8–11. The vulnerability allows a remote attacker to obtain sensitive browsing-history information via image caching vectors, i.e., an information-disclosure vulnerability. Connected sources corroborate IE as the affected product family and describ...

July 2015 Security Updates

Today we released security updates for Microsoft Windows, Microsoft Office, Microsoft SQL Server, and Internet Explorer. As a best practice, we encourage customers to apply security updates as soon as they are released. For more information about this month’s security updates and advisories visit...

Microsoft Internet Explorer Memory Corruption (MS15-065: CVE-2015-2411)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

Microsoft Internet Explorer CVE-2015-2389 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

Microsoft Internet Explorer CVE-2015-1733 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...