Microsoft Internet Explorer 11 - Sandbox Escape

Microsoft Internet Explorer 11 - Sandbox Escape Inject into IE11. Will work on other sandboxes that allow the opening of windows filepickers through a broker. You will gain medium IL javascript execution, at which point you simply retrigger your IE RCE bug. EDB Note Download:...

Microsoft Internet Explorer 11 - XML External Entity Injection

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-INTERNET-EXPLORER-v11-XML-EXTERNAL-ENTITY-INJECTION-0DAY.txt + ISR: ApparitionSec Vendor www.microsoft.com Product Microsoft Internet Explorer v11 latest version...

Microsoft Internet Explorer 11 - Null Pointer Dereference

Exloit Title: Microsoft Internet Explorer 11 - Null Pointer Difference Author: Gjoko 'LiquidWorm' Krstic @zeroscience Date: 2018-11-03 Vendor: Microsoft Corporation Product web page: https://www.microsoft.com Affected version: 11.345.17134.0 Update Versions: 11.0.90 KB4462949 11.1387.15063.0 Upda...

Microsoft Internet Explorer 11 - Js::RegexHelper::RegexReplace Use-After-Free Exploit

Exploit for windows platform in category dos / poc...

CVE-2014-8985

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2810, CVE-2014-2811, CVE-2014-2822, CVE-2014-282...

CVE-2014-4145: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2810, CVE-2014-2811, CVE-2014-2822, CVE-2014-282...

CVE-2014-4066: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2787, CVE-2014-2790, CVE-2014-2802, and...

CVE-2014-8985: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2810, CVE-2014-2811, CVE-2014-2822, CVE-2014-282...

CVE-2014-4112: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0304...

Microsoft Internet Explorer - mshtml.dll Remote Code Execution (MS17-007) Exploit

Exploit for windows platform in category remote exploits Exploit Title: Microsoft Internet Explorer - 'mshtml.dll' Remote Code Execution MS17-007 Google Dork: NA Date: 24/7/2017 Exploit Author: Mohamed Hamdy - Nsecurity Vendor Homepage: https://www.microsoft.com Version: Microsoft Internet Explor...

CVE-2017-0049

The VBScript engine in Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Scripting Engine Information Disclosure Vulnerability." This vulnerability is different from those described in CVE-2017-0018, and...

CVE-2017-0154: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Microsoft Internet Explorer 11 on Windows 10, 1511, and 1606 and Windows Server 2016 does not enforce cross-domain policies, allowing attackers to access information from one domain and inject it into another via a crafted application, aka, "Internet Explorer Elevation of Privilege Vulnerability....

CVE-2017-0033: Improper Input Validation

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to spoof web content via a crafted web site, aka "Microsoft Browser Spoofing Vulnerability." This vulnerability is different from those described in CVE-2017-0012 and CVE-2017-0069...

CVE-2017-0012: Improper Input Validation

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to spoof web content via a crafted web site, aka "Microsoft Browser Spoofing Vulnerability." This vulnerability is different from those described in CVE-2017-0033 and CVE-2017-0069...

CVE-2017-0049: Exposure of Sensitive Information to an Unauthorized Actor

The VBScript engine in Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Scripting Engine Information Disclosure Vulnerability." This vulnerability is different from those described in CVE-2017-0018, and...

PT-2017-1511

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer 11 on Windows 10, 1511, and 1606 and Windows Server 2016 Description The issue arises from the failure to enforce cross-domain policies, allowing attackers to access information from one domain and inject it into...

CVE-2016-7287

The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."...

CVE-2016-7284: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Internet Explorer 10 and 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."...

CVE-2016-7287: Improper Restriction of Operations within the Bounds of a Memory Buffer

The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."...

PT-2016-7288

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer 11 affected versions not specified Microsoft Edge affected versions not specified Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a...