CVE-2014-4126

Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...

CVE-2014-4141

Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...

CVE-2014-4128

CVE-2014-4128 affects Microsoft Internet Explorer 6–11. The vulnerability is a memory corruption issue that allows remote code execution or denial of service when processing a crafted web page, due to an error in how IE handles certain objects. The connected sources indicate multiple vulnerable I...

CVE-2014-4140

Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability."...

CVE-2014-4123

Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," as exploited in the wild in October 2014, a different vulnerability than CVE-2014-4124...

CVE-2014-4127

Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...

CVE-2014-4133

Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-4137...

CVE-2014-4126

CVE-2014-4126 affects Microsoft Internet Explorer 10 and 11 . The vulnerability allows a remote attacker to execute arbitrary code or cause a denial of service through memory corruption triggered by a crafted web page. Affected products are IE 10 and IE 11. The root cause is memory corruption in ...

CVE-2014-4129

CVE-2014-4129 affects Microsoft Internet Explorer (notably IE8) and is described in connected sources as a remote memory-corruption vulnerability exploitable via a crafted web page. The underlying issue is memory corruption that could allow remote code execution or a denial of service when proces...

CVE-2014-4128

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...

CVE-2014-4124

Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," a different vulnerability than CVE-2014-4123...

CVE-2014-4130

Technical details for CVE-2014-4130 are not publicly available in the provided documents. Monitor for updates.

CVE-2014-4132

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-4130 and CVE-2014-4138...

CVE-2014-4138

CVE-2014-4138 is a vulnerability in Microsoft Internet Explorer 11 causing memory corruption via a crafted web site, potentially enabling remote code execution or a memory-based DoS. The issue is tied to MSHTML handling (as per the CVE family note referencing a different vulnerability than 4130/4...

CVE-2014-4141

CVE-2014-4141 affects Microsoft Internet Explorer 8–11. The connected sources confirm a remote code execution/memory-corruption vulnerability triggered by visiting a crafted web page, due to how IE handles object initialization/deletion. Public exploits exist for this vulnerability, and it is add...

CVE-2014-4129

Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...

CVE-2014-4137

CVE-2014-4137 affects Microsoft Internet Explorer 6 and 7, allowing remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. Root cause: memory corruption in IE’s handling of web content. Impact: remote code execution or memory-based DoS ...

CVE-2014-4123

CVE-2014-4123 affects Microsoft Internet Explorer 7–11. The vulnerability allows remote attackers to gain privileges via a crafted web site (elevation of privilege). Exploitation in the wild was noted in October 2014 (per the CVE description). Mitigation: apply the MS14-056 cumulative update for ...

CVE-2014-4127

CVE-2014-4127 affects Microsoft Internet Explorer 6–10 (as described in the initial entry; some connected sources also reference IE7–10) and is caused by a memory corruption issue triggered by a crafted web page. This vulnerability allows remote attackers to execute arbitrary code or cause a deni...

CVE-2014-4140

CVE-2014-4140 affects Microsoft Internet Explorer 8–11 and is a security-bypass via ASLR circumvention when visiting a crafted web site. The root cause is an ASLR protection bypass in IE, enabling remote attackers to bypass memory protections. Public exploitation exists, and multiple connected so...