Microsoft Internet Explorer Elevation of Privilege Vulnerability (CNVD-2017-03516)

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. An elevation of privilege vulnerability exists in Microsoft Internet Explorer. A remote attacker could exploit this vulnerability to...

CVE-2017-0040

CVE-2017-0040 / CVE-2017-0130 describe memory corruption in the Scripting Engine of Internet Explorer 9–11 that can allow remote code execution or denial of service when a user visits a crafted site. The flaw affects the IE scripting engine, and the two CVEs are stated as distinct from one anothe...

CVE-2017-0008

Technical details for CVE-2017-0008 are not publicly available in the provided documents. Monitor for updates from official advisories; referenced items cover related CVEs but do not specify this CVE’s specifics.

CVE-2017-0059

Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka “Internet Explorer Information Disclosure Vulnerability.” This vulnerability is different from those described in CVE-2017-0008 and CVE-2017-0009. Recent...

CVE-2017-0130

The CVE-2017-0130 entry covers a memory corruption vulnerability in the Scripting Engine of Microsoft Internet Explorer versions 9–11. According to the description, a crafted web site could cause memory corruption, enabling remote attackers to execute arbitrary code or cause a denial of service. ...

CVE-2017-0018

Microsoft Internet Explorer 10 and 11 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka “Internet Explorer Memory Corruption Vulnerability.” This vulnerability is different from those described in CVE-2017-0037 and...

CVE-2017-0149

Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka “Internet Explorer Memory Corruption Vulnerability.” This vulnerability is different from those described in CVE-2017-0018 and...

CVE-2017-0149

Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." This vulnerability is different from those described in CVE-2017-0018 and...

CVE-2017-0154

Microsoft Internet Explorer 11 on Windows 10, 1511, and 1606 and Windows Server 2016 does not enforce cross-domain policies, allowing attackers to access information from one domain and inject it into another via a crafted application, aka, "Internet Explorer Elevation of Privilege Vulnerability....

CVE-2017-0059

Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability." This vulnerability is different from those described in CVE-2017-0008 and CVE-2017-0009...

CVE-2017-0012

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to spoof web content via a crafted web site, aka "Microsoft Browser Spoofing Vulnerability." This vulnerability is different from those described in CVE-2017-0033 and CVE-2017-0069...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2017-03517)

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A memory corruption vulnerability exists in Microsoft IE versions 9 through 11. The vulnerability can be exploited by remote attacke...

CVE-2017-0018

Microsoft Internet Explorer 10 and 11 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." This vulnerability is different from those described in CVE-2017-0037 and...

CVE-2017-0130

The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability." This vulnerability is different from that described in...

CVE-2017-0040

The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability." This vulnerability is different from that described in...

CVE-2017-0018

Technical details for CVE-2017-0018 are not publicly available in the provided connected documents. Monitor for updates from official advisories and vulnerability catalogs to obtain affected products, impact, and remediation information.

CVE-2017-0033

CVE-2017-0033 affects Microsoft Internet Explorer 11 and Microsoft Edge, enabling remote attackers to spoof web content via a crafted web site (the vulnerability is distinct from CVE-2017-0012 and CVE-2017-0069). Based on the connected documents, the exploit surface is network-propagated and leve...

CVE-2017-0009

Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability." This vulnerability is different from those described in CVE-2017-0011, CVE-2017-0017, CVE-2017-0065,...

CVE-2017-0059

CVE-2017-0059 affects Microsoft Internet Explorer 9–11 and is described as an information-disclosure vulnerability that allows remote attackers to obtain sensitive data from process memory via a crafted web site. The CVE has public exploit references (e.g., Exploit-DB entries) and has been observ...

CVE-2017-0149

CVE-2017-0149 concerns Microsoft Internet Explorer (IE) 9–11, described as a memory corruption vulnerability that can allow remote code execution or cause a denial of service when a user visits a crafted website. The connected documents reiterate that this IE memory‑corruption issue is distinct f...