CVE-2016-1110

CVE-2016-1110 is a use-after-free vulnerability in Adobe Flash Player 21.0.0.213 and earlier, affecting Flash libraries used by Microsoft Internet Explorer 10/11 and Microsoft Edge. The CVE description notes unknown impact/vectors, but related advisories and vendor bulletins list this family of i...

CVE-2016-3247

CVE-2016-3247 affects Microsoft Internet Explorer 11 and Microsoft Edge, allowing remote code execution or memory corruption via a crafted web site. The root cause is memory handling in the browser when loading objects, enabling code execution with the attacker’s privileges. In the wild exploits ...

CVE-2016-3273

CVE-2016-3273 is a browser information disclosure vulnerability in the XSS Filter of Microsoft Internet Explorer 9–11 and Microsoft Edge. The root cause is improper restriction of JavaScript by the XSS Filter, allowing remote attackers to obtain sensitive information via a crafted website. The is...

CVE-2017-11793

CVE-2017-11793 affects Internet Explorer on multiple Windows editions where the scripting engine’s memory handling of objects can be abused to execute arbitrary code in the user context. Root cause: memory corruption in the scripting engine. Impact: remote code execution with high severity (per C...

CVE-2017-11810

Technical details for CVE-2017-11810 are not provided in the connected documents. The Initial description lacks product/vendor/version/root-cause specifics here; monitor for updates.

CVE-2017-8747

CVE-2017-8747 : A memory corruption vulnerability in Internet Explorer on Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1/RT 8.1, Windows Server 2012/R2, Windows 10 (various builds) and Windows Server 2016. Root cause: IE accesses objects in memory in a way that can corrupt memory. Impact:...

CVE-2018-8457

Technical details about CVE-2018-8457 are not provided in the connected documents; the initial description is high-level. Monitor for updates.

CVE-2019-0835

CVE-2019-0835 concerns an information-disclosure vulnerability in the Microsoft Scripting Engine where in-memory object handling is improper, enabling potential disclosure. The CVE description and connected Red Hat/OpenVAS entries confirm the issue title and root cause (improper handling of objec...

CVE-2019-0930

CVE-2019-0930 refers to an information-disclosure vulnerability in Microsoft Internet Explorer where objects in memory are improperly handled. The issue affects IE versions 9–11 and can disclose sensitive information, with a confidentiality impact described as HIGH in CVE references. The NVD entr...

CVE-2010-1261

CVE-2010-1261 : A memory-corruption vulnerability in the Internet Explorer 8 Developer Toolbar (IE8) affects IE8 SP1/SP2/SP3. The connected MS knowledge base MS10-035 documents a remote code execution risk when processing a specially crafted page, due to uninitialized/deleted objects. Microsoft’s...

CVE-2014-1805

Technical details for CVE-2014-1805 are not publicly provided in the supplied documents. Monitoring for updates is advised.

CVE-2015-1737

CVE-2015-1737 corresponds to a memory corruption vulnerability in Microsoft Internet Explorer 10 and 11. The flaw allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. It is described as a distinct vulnerability from CVE-2015-1731, CVE-2015-1736, a...

CVE-2016-7199

CVE-2016-7199 affects Microsoft Internet Explorer (IE) versions 9–11 and Microsoft Edge, where a crafted web site can bypass the Same Origin Policy to disclose sensitive window-state information (information-disclosure vulnerability). Root cause is tied to how IE/Edge handle window/state data acr...

CVE-2017-0201

The connected Nessus entry confirms CVE-2017-0201 is a remote code execution in Internet Explorer related to memory corruption in the scripting engine when handling objects in memory. The vulnerability affects Internet Explorer’s scripting engines (JScript/VBScript) and could allow code execution...

CVE-2017-11855

CVE-2017-11855 is an Internet Explorer memory corruption vulnerability affecting IE on Windows 7 SP1, Windows Server 2008 SP2/R2, Windows 8.1/RT 8.1, Windows 10 (various builds), and Windows Server 2012/2016. The root cause is how IE handles objects in memory, enabling an attacker to gain the sam...

CVE-2018-8114

A remote code execution vulnerability exists in Internet Explorer 11 due to the way the scripting engine handles objects in memory, specifically within Microsoft ChakraCore . The root cause involves memory corruption issues, including out-of-bounds writes, Use-After-Free (UAF) in ServerScriptCont...

CVE-2004-0214

CVE-2004-0214 is a remote code execution vulnerability in the Windows Shell (Shell32) that stems from an unchecked/buffered input condition in the Shell’s handling of messages when launching applications. An attacker could entice a user to visit a malicious Web page or open a crafted file, potent...

CVE-2006-4868

A stack-based buffer overflow exists in the Vector Graphics Rendering engine (vgx.dll) , impacting Microsoft Outlook and Internet Explorer 6.0 on Windows XP SP2 and other versions. The vulnerability is triggered by processing a Vector Markup Language (VML) file containing a long fill parameter wi...

CVE-2007-1751

CVE-2007-1751 is an Internet Explorer UNINITIALIZED MEMORY CORRUPTION vulnerability. It affects IE 5.01, 6, and 7 and arises when a prototype variable points to a table cell, enabling remote code execution via a specially crafted webpage. The issue is part of the MS07-033 update (Cumulative Secur...

CVE-2009-2057

Microsoft Internet Explorer prior to version 8 is described as vulnerable to an SSL-tampering style attack where the HTTP Host header is used to determine the document context in a 4xx or 5xx CONNECT response from a proxy. This allows a man-in-the-middle attacker to modify the CONNECT response an...

CVE-2010-0267

CVE-2010-0267 affects Microsoft Internet Explorer 6/6 SP1/7. The issue is remote code execution due to improper handling of memory objects (uninitialized or deleted), causing memory corruption. Multiple connected advisories confirm exploitation vectors via malicious web pages and the potential fo...

CVE-2013-0026

CVE-2013-0026 concerns a use-after-free vulnerability in Microsoft Internet Explorer 9, specifically in the InsertElement memory access path, which can allow remote code execution when a user visits a crafted web site. Technical details in connected documents confirm IE9 as affected and identify ...

CVE-2014-4081

Summary (mode C): Microsoft Internet Explorer (versions 6–11) is affected by multiple externally disclosed vulnerabilities (notably ZDI advisories) that enable remote code execution via use‑after‑free/ dangling-pointer flaws in IE object handling (examples: CAttrArray, CFieldSetLayout, CTableCell...

CVE-2014-4133

CVE-2014-4133 and CVE-2014-4137 affect Microsoft Internet Explorer 6 and 7, causing remote code execution or memory corruption via a crafted web site. These are described as a memory corruption family but are noted as different vulnerabilities from one another. The connected evidence references a...

CVE-2015-0056

CVE-2015-0056 affects Microsoft Internet Explorer 11, where a memory corruption vulnerability can be triggered by a crafted web site, enabling remote code execution or a denial of service. The connected documents reference the same description but do not provide explicit root-cause details, affec...

CVE-2015-1626

CVE-2015-1626 affects Microsoft Internet Explorer 11 and describes a memory corruption vulnerability that allows remote code execution or a DoS when visiting a crafted web page. The root cause is memory handling flaws in IE 11 (distinct from CVE-2015-0056/-1623). Microsoft issued a fix via MS15-0...

CVE-2018-0988

CVE-2018-0988 is a remote code execution vulnerability in the Internet Explorer scripting engine related to memory object handling. Affected products include IE9, IE10, and IE11. Root cause described as memory handling issues in the scripting engine that can lead to code execution. The CVSSbase i...

CVE-2019-0995

CVE-2019-0995 is described as a security feature bypass affecting urlmon.dll in Internet Explorer when handling certain Mark of the Web queries. The vulnerability is characterized as a bypass of security restrictions (IE) with potential HIGH impact per CVSSv3: network access, no privileges requir...

CVE-2019-1192

Technical details for CVE-2019-1192 are not publicly available in the provided documents. Monitor for updates from Microsoft MSRC and NVD.

CVE-2007-3902

CVE-2007-3902 is a use-after-free/ memory corruption vulnerability in Microsoft Internet Explorer 5.01–7, caused by the CRecalcProperty function in mshtml.dll. Attackers could trigger arbitrary code execution by calling the setExpression method and then modifying an element’s outerHTML, leading t...

CVE-2010-0245

CVE-2010-0245 describes an Uninitialized Memory Corruption vulnerability in Microsoft Internet Explorer 8 where accessing an uninitialized or deleted in-memory object can lead to remote code execution. The connected KB (MS10-002) confirms this class of issue affects Internet Explorer and provides...

CVE-2014-6327

CVE-2014-6327 pertains to Microsoft Internet Explorer 11 and describes a vulnerability in which a crafted web site can cause memory corruption, allowing a remote attacker to execute arbitrary code or cause a denial of service. The connected documents corroborate that the flaw affects IE11 via mem...

CVE-2014-6345

CVE-2014-6345 affects Microsoft Internet Explorer 9 and 10 and is a cross-domain information-disclosure vulnerability caused by improper enforcement of cross-domain policies, enabling remote attackers to read content from a different domain or security zone via a crafted webpage. The issue is add...

CVE-2015-1731

CVE-2015-1731 affects Microsoft Internet Explorer 10 and 11, where memory corruption can be triggered by a crafted web site, enabling remote code execution or a denial of service. The issue is described as

CVE-2015-2397

CVE-2015-2397 refers to a memory corruption vulnerability in Microsoft Internet Explorer (IE) versions 6–11 that can enable remote code execution or a denial of service when a user visits a crafted web page. The issue arises from improper handling of in-memory objects after deletion, per connecte...

CVE-2016-0194

CVE-2016-0194 is Internet Explorer Information Disclosure. Public docs confirm that IE10/IE11 could disclose file contents by a crafted webpage due to improper handling of file access permissions. The vulnerability enables remote attackers to read sensitive data from arbitrary files via web conte...

CVE-2016-1108

CVE-2016-1108 is an Adobe Flash Player vulnerability (affecting 21.0.0.213 and earlier in Flash libraries used by IE/Edge) described as a use-after-free leading to remote code execution. Public writeups and advisories (APSB16-15) attribute exploitation to crafted SWF handling, with patches releas...

CVE-2016-7196

CVE-2016-7196 affects Microsoft Internet Explorer 10/11 and Microsoft Edge. The vulnerability enables remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. Severity is HIGH (CVSS v3: 7.5) with network access, user interaction required....

CVE-2016-7278

CVE-2016-7278 affects Microsoft Internet Explorer 9–11 and is described as an information-disclosure vulnerability by the Windows Hyperlink Object Library, allowing remote attackers to read memory contents via a crafted web site. Affected product: IE (IE9–IE11). Root cause: information disclosure...

CVE-2017-8736

CVE-2017-8736 is an information-disclosure vulnerability affecting Internet Explorer in Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1/RT 8.1, Windows Server 2012 R2, and Internet Explorer/Edge in Windows 10 (Gold and various builds). The root cause, as described in connected Nessus data,...

CVE-2019-0761

Technical details for CVE-2019-0761 are not publicly available in the provided documents; the corpus mentions IE security feature bypass but does not disclose affected components, versions, root cause, or remediation. Monitor for updates.

CVE-2000-0518

This CVE concerns Internet Explorer 4.x/5.x where SSL certificate validation is incomplete when the connection is initiated via an image or an iframe. The underlying issue is that IE verifies only that the certificate was issued by a trusted root, but does not confirm the server name or the certi...

CVE-2004-0841

Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window, aka "HijackClick 3" and the "Script in Image Tag File Download Vulnerability."

CVE-2004-0867

CVE-2004-0867 affects Mozilla Firefox 0.9.2 by allowing websites to set cookies for country-specific top‑level domains (e.g., .ltd.uk, .plc.uk, .sch.uk), which could enable a session‑fixation attack and session hijack. The note indicates 2.x may also be affected. Technical details in the provided...

CVE-2009-1140

CVE-2009-1140 affects Microsoft Internet Explorer versions including IE 5.01 SP4; 6 SP1; 6 and 7 for Windows XP SP2/SP3; 6/7 for Server 2003 SP2; 7 for Vista SP1/SP2; and 7 for Server 2008 SP2. The vulnerability is a cross-domain information disclosure caused by IE failing to prevent HTML renderi...

CVE-2014-0297

CVE-2014-0297 is a vulnerability in Microsoft Internet Explorer (IE) 8–11 described as allowing an attacker to remotely execute arbitrary code or cause a denial of service via a crafted web site, commonly referred to as the Internet Explorer Memory Corruption Vulnerability . The connected records...

CVE-2014-1751

CVE-2014-1751 is a memory-corruption vulnerability in Microsoft Internet Explorer (IE) that can be triggered by visiting a crafted web site, enabling remote code execution or memory corruption leading to a denial of service. The IE family (versions 6–11) is affected; the underlying issue is a mem...

CVE-2014-4127

CVE-2014-4127 affects Microsoft Internet Explorer 6–10 (as described in the initial entry; some connected sources also reference IE7–10) and is caused by a memory corruption issue triggered by a crafted web page. This vulnerability allows remote attackers to execute arbitrary code or cause a deni...

CVE-2014-4130

Technical details for CVE-2014-4130 are not publicly available in the provided documents. Monitor for updates.

CVE-2014-4132

The CVE-2014-4132 entry concerns Microsoft Internet Explorer 11 memory‑corruption vulnerabilities exploitable via a crafted web site, enabling remote code execution or a denial of service. The related connected records show the broader family (CVE-2014-4130 and CVE-2014-4138) and note that CVE-20...