CVE-2015-6138

CVE-2015-6138 affects Microsoft Internet Explorer 8–11, where improper handling of HTML attributes in HTTP responses allows remote attackers to bypass the XSS filter. The issue is addressed by the MS15-124 update (December 8, 2015), which patches multiple IE vulnerabilities including this one. Pu...

CVE-2015-6141

Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6134...

CVE-2015-6135

CVE-2015-6135 concerns Microsoft VBScript 5.7/5.8 and JScript 5.7/5.8 engines used in Internet Explorer 8–11. The vulnerability allows a remote attacker to read sensitive data from process memory via a crafted web page, i.e., an information‑disclosure flaw. Affected component is the VBScript/JScr...

CVE-2015-6159

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6140, CVE-2015-6142,...

CVE-2015-6145

Microsoft Internet Explorer 7 and 8 are affected by CVE-2015-6145 (memory corruption) via a crafted web site, potentially enabling remote code execution or DoS. This CVE is distinct from CVE-2015-6146. CNVD entries corroborate memory corruption in IE7/IE8. Microsoft addressed this family with MS1...

CVE-2015-6149

CVE-2015-6149 affects Microsoft Internet Explorer 8 and 9. The connected documents describe a memory corruption vulnerability triggered by visiting a crafted web site, allowing remote code execution or a denial of service. The vulnerability is identified as one of two IE memory corruption issues,...

CVE-2015-6143

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6140, CVE-2015-6142, CVE-2015-6153, CVE-2015-615...

CVE-2015-6134

Microsoft Internet Explorer 9 is affected by CVE-2015-6134 (Memory Corruption Vulnerability) where a crafted web site can trigger remote code execution or memory corruption. Root cause is memory corruption triggered by processing crafted content, with impact of potential remote code execution or ...

CVE-2015-6142

CVE-2015-6142 concerns memory corruption in Microsoft Internet Explorer 11 and Microsoft Edge triggered by visiting a crafted web site, classified as a high-severity remote code execution/DoS risk. The vulnerability is referenced alongside other IE/Edge memory-corruption CVEs and is addressed by ...

CVE-2015-6146

Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6145...

CVE-2015-6083

CVE-2015-6083 concerns memory corruption in Microsoft Internet Explorer 8–11 due to improper handling of in-memory objects, allowing remote attackers to run arbitrary code or cause a denial of service via a crafted web site. Connected CNVD entries (CNVD-2015-08061) explicitly describe IE memory c...

CVE-2015-6161

CVE-2015-6161 affects Microsoft Internet Explorer (IE) 7–11 and Microsoft Edge, with the root cause described as a bypass of Address Space Layout Randomization (ASLR) via a crafted web site. Public sources in the connected documents confirm this is mitigated by Microsoft security updates MS15-124...

CVE-2015-6154

CVE-2015-6154 affects Microsoft Internet Explorer 7–11 and Microsoft Edge with memory corruption when rendering crafted web content. The root cause is memory corruption leading to remote code execution or memory-related denial of service. The OpenVAS/CNVD entries corroborate IE/Edge memory corrup...

CVE-2015-6158

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6140, CVE-2015-6142,...

CVE-2015-6144

CVE-2015-6144 corresponds to a Microsoft Internet Explorer/Edge XSS Filter Bypass vulnerability. The connected sources confirm IE versions 8–11 and Edge are affected by mishandling HTML attributes in HTTP responses, enabling a remote attacker to bypass the built-in XSS protection via unspecified ...

CVE-2015-6157

CVE-2015-6157 is an information-disclosure vulnerability in Microsoft Internet Explorer 11. A crafted webpage can cause memory disclosure, allowing remote attackers to read sensitive process memory. Public exploitation is noted in related NASL plugin data for MS15-124 (IE updates), and multiple a...

CVE-2015-6147

Microsoft Internet Explorer 8 and 9 are affected by CVE-2015-6147, a memory corruption vulnerability triggered by visiting a crafted web site. The CNVD entries describe memory corruption when IE fails to properly access objects in memory, potentially allowing remote code execution or memory corru...

CVE-2015-6156

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6148...

CVE-2015-6138

Microsoft Internet Explorer 8 through 11 mishandles HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site scripting XSS protection mechanism via unspecified vectors, aka "Internet Explorer XSS Filter Bypass Vulnerability."...

CVE-2015-6140

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6142, CVE-2015-6143,...