CVE-2015-6140

The CVE-2015-6140 entry concerns Microsoft Internet Explorer 11 and Microsoft Edge. A memory corruption vulnerability can be triggered by a crafted web site, allowing remote code execution or memory corruption that could lead to a denial of service. The linked OpenVAS note references a missing Mi...

CVE-2015-6162

Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6152...

CVE-2015-6147

Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6149...

CVE-2015-6083

Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6151...

CVE-2015-6152

Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6162...

CVE-2015-6140

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6142, CVE-2015-6143,...

CVE-2015-6146

The provided connected sources confirm a memory corruption vulnerability in Microsoft Internet Explorer versions 7 and 8. The root cause is memory access issues that allow remote attackers to execute arbitrary code or cause a denial of service when visiting a crafted webpage. CNVD-2015-08067 and ...

CVE-2015-6153

CVE-2015-6153 is part of the Microsoft browser memory corruption family affecting Internet Explorer 11 and Microsoft Edge. The connected data describe memory corruption when processing crafted web content, enabling remote code execution or memory-related denial of service. The vulnerabilities are...

CVE-2015-6142

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6140, CVE-2015-6143,...

CVE-2015-6144

CVE-2015-6144 corresponds to a Microsoft Internet Explorer/Edge XSS Filter Bypass vulnerability. The connected sources confirm IE versions 8–11 and Edge are affected by mishandling HTML attributes in HTTP responses, enabling a remote attacker to bypass the built-in XSS protection via unspecified ...

CVE-2015-6149

Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6147...

CVE-2015-6138

Microsoft Internet Explorer 8 through 11 mishandles HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site scripting XSS protection mechanism via unspecified vectors, aka "Internet Explorer XSS Filter Bypass Vulnerability."...

CVE-2015-6141

Microsoft Internet Explorer 9 is affected by CVE-2015-6141, a memory corruption vulnerability exploitable via a crafted web site that can lead to remote code execution or denial of service. The available documents identify the affected product (Internet Explorer 9) and the attack vector (crafted ...

CVE-2015-6150

CVE-2015-6150 is a Microsoft Internet Explorer memory corruption vulnerability (IE 7–11) that attackers can trigger via a crafted web site, potentially allowing remote code execution or a denial of service. The connected documents describe the vulnerability family (memory corruption in IE/Edge) a...

CVE-2015-6164

Microsoft Internet Explorer 9 through 11 improperly implements a cross-site scripting XSS protection mechanism, which allows remote attackers to bypass the Same Origin Policy via a crafted web site, aka "Internet Explorer XSS Filter Bypass Vulnerability."...

CVE-2015-6147

Microsoft Internet Explorer 8 and 9 are affected by CVE-2015-6147, a memory corruption vulnerability triggered by visiting a crafted web site. The CNVD entries describe memory corruption when IE fails to properly access objects in memory, potentially allowing remote code execution or memory corru...

CVE-2015-6157

CVE-2015-6157 is an information-disclosure vulnerability in Microsoft Internet Explorer 11. A crafted webpage can cause memory disclosure, allowing remote attackers to read sensitive process memory. Public exploitation is noted in related NASL plugin data for MS15-124 (IE updates), and multiple a...

CVE-2015-6162

Technical details for CVE-2015-6162 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2015-6139

CVE-2015-6139 affects Microsoft Internet Explorer 11 and Microsoft Edge. The flaw arises from how content types are handled, allowing remote attackers to execute arbitrary web script in a privileged context via a crafted web site (high risk, CVSS v2 base 9.3). Affected products: Internet Explorer...

CVE-2015-6135

The Microsoft 1 VBScript 5.7 and 5.8 and 2 JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Scripting Engine Information Disclosure Vulnerability."...