CVE-2015-2398

Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the XSS filter via a crafted attribute of an element in an HTML document, aka "Internet Explorer XSS Filter Bypass Vulnerability."...

CVE-2015-2401

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1767 and CVE-2015-2408...

CVE-2015-2410

CVE-2015-2410 corresponds to multiple Internet Explorer versions (IE 6–11) information-disclosure vulnerabilities. The core issue is that a crafted stylesheet can cause IE to reveal the existence of local files, enabling an attacker to infer local-file presence. The CVE entry notes an information...

CVE-2015-2384

CVE-2015-2384 is a Microsoft Internet Explorer 11 memory-corruption vulnerability exploitable via a crafted web site, potentially leading to remote code execution or DoS. The connected sources confirm the same class of issue (IE11 memory corruption) and tie this CVE to MS15-065 (Cumulative Securi...

CVE-2015-2425

Technical details about CVE-2015-2425 are not publicly available in the provided connected documents. Current sources confirm IE11 memory corruption remote code execution vector, but specifics (affected versions, root cause, fixes) are not disclosed here. Monitor for updates.

CVE-2015-2413

CVE-2015-2413 affects Microsoft Internet Explorer 6–11. A remote attacker can determine the existence of local files via a crafted module-resource request, an information-disclosure vulnerability arising from how IE handles certain module-resource requests. The public description confirms IE info...

CVE-2015-2385

CVE-2015-2385 affects Microsoft Internet Explorer (IE) versions 6–11. A remote attacker can exploit a memory corruption flaw by enticing a user to load a crafted webpage, potentially allowing arbitrary code execution or a memory-related denial of service. The root cause involves accessing an obje...

CVE-2015-2408

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1767 and CVE-2015-2401...

CVE-2015-2419

JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "JScript9 Memory Corruption Vulnerability."...

CVE-2015-1729

CVE-2015-1729 corresponds to a cross-domain information disclosure vulnerability in Microsoft Internet Explorer (IE9–IE11). The issue allows a remote attacker to read content from a different domain or zone via a specially crafted web page, due to how IE enforces cross-domain policies. Affected p...

CVE-2015-2425

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2383 and CVE-2015-2384...

CVE-2015-2390

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2385, CVE-2015-2397, CVE-2015-2404,...

CVE-2015-2397

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2385, CVE-2015-2390, CVE-2015-2404,...

CVE-2015-2403

Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...

CVE-2015-2422

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2385, CVE-2015-2390, CVE-2015-2397,...

CVE-2015-2411

Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1733 and CVE-2015-2389...

CVE-2015-2412

CVE-2015-2412 affects Microsoft Internet Explorer 10 and 11, enabling a remote attacker to read arbitrary local files via a crafted pathname. The vulnerability stems from improper handling/validation of file paths, leading to information disclosure. Public references in the connected documents id...

CVE-2015-1733

Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2389 and CVE-2015-2411...

CVE-2015-2401

Microsoft Internet Explorer 9–11 is affected by memory corruption vulnerabilities that allow remote code execution (and DoS) via a crafted webpage. Connected sources corroborate a family of IE memory‑corruption flaws, including CVE‑2015‑2401, with MS15‑065 delivering the Cumulative Security Updat...

CVE-2015-2406

Microsoft Internet Explorer Memory Corruption vulnerabilities (CVE-2015-2406) affect IE 6–11. The root cause is a memory corruption error when accessing a memory object that has been deleted, enabling remote code execution or memory denial-of-service via crafted web pages. Connected advisories (M...