CVE-2015-6138

Microsoft Internet Explorer 8 through 11 mishandles HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site scripting XSS protection mechanism via unspecified vectors, aka "Internet Explorer XSS Filter Bypass Vulnerability."...

CVE-2015-6138

CVE-2015-6138 affects Microsoft Internet Explorer 8–11, where improper handling of HTML attributes in HTTP responses allows remote attackers to bypass the XSS filter. The issue is addressed by the MS15-124 update (December 8, 2015), which patches multiple IE vulnerabilities including this one. Pu...