Microsoft Internet Explorer CVE-2016-0005 Remote Privilege Escalation Vulnerability

Description Microsoft Internet Explorer is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Internet Explorer 9, 10, and 11 are vulnerable. Technologies Affected Microsoft Internet...

KLA10740 Multiple vulnerabilities in Microsoft Internet Explorer and Edge

Multiple serious vulnerabilities have been found in Microsoft Internet Explorer and Edge. Malicious users can exploit these vulnerabilities to gain privileges or execute arbitrary code. Below is a complete list of vulnerabilities 1. Improper memory objects handling at VBScript engine can be...

KLA10728 Obsolete Adobe Flash Player for Windows

Obsolete version of Adobe Flash Player was found in Microsoft Internet Explorer. By exploiting this vulnerability malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited remotely. Technical details For further information look at KLA10727 Origina...

Microsoft Internet Explorer CTableRow Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Microsoft Internet Explorer RtfToForeign32 Out-Of-Bounds Indexing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Microsoft Internet Explorer Denial of Service Vulnerability (CNVD-2015-08097)

Microsoft Internet Explorer is a popular web browser introduced by Microsoft and bundled with the Windows operating system. A denial of service vulnerability exists in Microsoft Internet Explorer 9, which could allow a remote attacker to execute arbitrary code or cause a denial of service via a...

Microsoft IE 11 MSHTML!CObjectElement Use-After-Free

Blue Frost Security GmbH https://www.bluefrostsecurity.de/ researchatbluefrostsecurity.de BFS-SA-2015-003 10-December-2015 Vendor: Microsoft, http://www.microsoft.com Affected Products: Internet Explorer Affected Version: IE 11 Vulnerability: MSHTML!CObjectElement Use-After-Free Vulnerability CVE...

Microsoft Internet Explorer Denial of Service Vulnerability (CNVD-2015-08100)

Microsoft Internet Explorer is a popular web browser introduced by Microsoft and bundled with the Windows operating system. A denial of service vulnerability exists in Microsoft Internet Explorer 7 through 11 and Microsoft Edge, which could allow a remote attacker to execute arbitrary code or cau...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-08064)

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A memory corruption vulnerability exists when Microsoft IE versions 8 and 9 fail to properly access objects in memory. Allows an...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-08066)

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A memory corruption vulnerability exists when Microsoft IE versions 7 and 8 fail to properly access objects in memory. Allows an...

CVE-2015-6160

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6140, CVE-2015-6142, CVE-2015-6143, CVE-2015-615...

CVE-2015-6157

Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."...

CVE-2015-6143

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6140, CVE-2015-6142, CVE-2015-6153, CVE-2015-615...

CVE-2015-6140

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6142, CVE-2015-6143,...

Cross site scripting

Microsoft Internet Explorer 8 through 11 mishandles HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site scripting XSS protection mechanism via unspecified vectors, aka "Internet Explorer XSS Filter Bypass Vulnerability."...

CVE-2015-6140

The CVE-2015-6140 entry concerns Microsoft Internet Explorer 11 and Microsoft Edge. A memory corruption vulnerability can be triggered by a crafted web site, allowing remote code execution or memory corruption that could lead to a denial of service. The linked OpenVAS note references a missing Mi...

CVE-2015-6149

CVE-2015-6149 affects Microsoft Internet Explorer 8 and 9. The connected documents describe a memory corruption vulnerability triggered by visiting a crafted web site, allowing remote code execution or a denial of service. The vulnerability is identified as one of two IE memory corruption issues,...

CVE-2015-6143

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6140, CVE-2015-6142, CVE-2015-6153, CVE-2015-615...

Microsoft Internet Explorer Multiple Vulnerabilities (3116180)

This host is missing a critical security update according to Microsoft Bulletin MS15-124. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Windows VBScript Filter Function Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose the contents of memory on applications using the VBScript scripting language on vulnerable installations of Microsoft Windows. Microsoft Internet Explorer is an affected application. User interaction is required to exploit this vulnerability ...