CVE-2014-1805

Technical details for CVE-2014-1805 are not publicly provided in the supplied documents. Monitoring for updates is advised.

CVE-2014-4130

Technical details for CVE-2014-4130 are not publicly available in the provided documents. Monitor for updates.

CVE-2014-6363

CVE-2014-6363 affects the Microsoft VBScript engine (versions 5.6–5.8) used with Internet Explorer and other products. The issue is a memory corruption vulnerability in VBScript CRegExp/engine handling that can allow remote code execution when a user visits a crafted web page. Exploitation is evi...

CVE-2015-0056

CVE-2015-0056 affects Microsoft Internet Explorer 11, where a memory corruption vulnerability can be triggered by a crafted web site, enabling remote code execution or a denial of service. The connected documents reference the same description but do not provide explicit root-cause details, affec...

CVE-2016-3273

CVE-2016-3273 is a browser information disclosure vulnerability in the XSS Filter of Microsoft Internet Explorer 9–11 and Microsoft Edge. The root cause is improper restriction of JavaScript by the XSS Filter, allowing remote attackers to obtain sensitive information via a crafted website. The is...

CVE-2016-3385

CVE-2016-3385 concerns the Microsoft Internet Explorer scripting engine (IE9–IE11) memory corruption vulnerability. A remote attacker can exploit it by tricking a user to visit a crafted website, potentially gaining arbitrary code execution or causing a memory corruption Denial of Service. The CV...

CVE-2016-4109

Technical details for CVE-2016-4109 are not publicly available in the provided documents; no affected product/version, impact or remediation details are specified here. Monitor for updates.

CVE-2017-0033

CVE-2017-0033 affects Microsoft Internet Explorer 11 and Microsoft Edge, enabling remote attackers to spoof web content via a crafted web site (the vulnerability is distinct from CVE-2017-0012 and CVE-2017-0069). Based on the connected documents, the exploit surface is network-propagated and leve...

CVE-2017-0201

The connected Nessus entry confirms CVE-2017-0201 is a remote code execution in Internet Explorer related to memory corruption in the scripting engine when handling objects in memory. The vulnerability affects Internet Explorer’s scripting engines (JScript/VBScript) and could allow code execution...

CVE-2017-11793

CVE-2017-11793 affects Internet Explorer on multiple Windows editions where the scripting engine’s memory handling of objects can be abused to execute arbitrary code in the user context. Root cause: memory corruption in the scripting engine. Impact: remote code execution with high severity (per C...

CVE-2017-11856

Technical details about CVE-2017-11856 are not provided in the connected documents; the initial description is the only public detail available here. Monitor for vendor advisories and security updates.

CVE-2017-8736

CVE-2017-8736 is an information-disclosure vulnerability affecting Internet Explorer in Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1/RT 8.1, Windows Server 2012 R2, and Internet Explorer/Edge in Windows 10 (Gold and various builds). The root cause, as described in connected Nessus data,...

CVE-2017-8747

CVE-2017-8747 : A memory corruption vulnerability in Internet Explorer on Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1/RT 8.1, Windows Server 2012/R2, Windows 10 (various builds) and Windows Server 2016. Root cause: IE accesses objects in memory in a way that can corrupt memory. Impact:...

CVE-2009-2576

CVE-2009-2576 refers to a Denial of Service in Microsoft Internet Explorer (IE) where a long Unicode string passed to the write method can consume CPU/memory. The OpenVAS entry OpenVAS:900400 explicitly links CVE-2009-2576 to IE Unicode String DoS and lists a base CVSS v2 score of 5.0 (AV:N/AC:L/...

CVE-2014-0297

CVE-2014-0297 is a vulnerability in Microsoft Internet Explorer (IE) 8–11 described as allowing an attacker to remotely execute arbitrary code or cause a denial of service via a crafted web site, commonly referred to as the Internet Explorer Memory Corruption Vulnerability . The connected records...

CVE-2014-4051

Microsoft Internet Explorer 8–11 is affected by CVE-2014-4051, where memory corruption can be triggered by a crafted web site, potentially allowing remote code execution or a denial of service. The vulnerability is one of several IE memory-corruption-related issues reported in 2014 (distinct from...

CVE-2015-2397

CVE-2015-2397 refers to a memory corruption vulnerability in Microsoft Internet Explorer (IE) versions 6–11 that can enable remote code execution or a denial of service when a user visits a crafted web page. The issue arises from improper handling of in-memory objects after deletion, per connecte...

CVE-2015-6155

CVE-2015-6155 affects Microsoft Internet Explorer 10/11 and Microsoft Edge. A remote attacker could execute arbitrary code or cause a denial of service via a crafted web site due to memory corruption in browser handling, leading to potential remote code execution. Public advisories MS15-124 (IE) ...

CVE-2016-3247

CVE-2016-3247 affects Microsoft Internet Explorer 11 and Microsoft Edge, allowing remote code execution or memory corruption via a crafted web site. The root cause is memory handling in the browser when loading objects, enabling code execution with the attacker’s privileges. In the wild exploits ...

CVE-2016-3260

The CVE-2016-3260 issue affects Microsoft’s scripting engines (JScript 9, VBScript, and Chakra) used by Internet Explorer 11 and Microsoft Edge. A memory corruption flaw in the engines could allow remote code execution or a denial of service when processing a crafted web site, as described in the...

CVE-2016-7199

CVE-2016-7199 affects Microsoft Internet Explorer (IE) versions 9–11 and Microsoft Edge, where a crafted web site can bypass the Same Origin Policy to disclose sensitive window-state information (information-disclosure vulnerability). Root cause is tied to how IE/Edge handle window/state data acr...

CVE-2018-8457

Technical details about CVE-2018-8457 are not provided in the connected documents; the initial description is high-level. Monitor for updates.

CVE-2019-0930

CVE-2019-0930 refers to an information-disclosure vulnerability in Microsoft Internet Explorer where objects in memory are improperly handled. The issue affects IE versions 9–11 and can disclose sensitive information, with a confidentiality impact described as HIGH in CVE references. The NVD entr...

CVE-2001-0338

The CVE-2001-0338 entry corresponds to Internet Explorer 5.5 and earlier failing to properly validate digital certificates when Certificate Revocation List (CRL) checking is enabled. The underlying issue is that, during CRL checking, IE does not consistently perform essential validity checks (e.g...

CVE-2006-4868

CVE-2006-4868: A stack-based buffer overflow in VGX.dll (VML processing) used by Microsoft Outlook and Internet Explorer on Windows XP SP2 enables remote code execution via a crafted VML rect tag with a long fill parameter. Affected: Internet Explorer/VML handling. Impact per sources: arbitrary c...

CVE-2007-1751

CVE-2007-1751 is an Internet Explorer UNINITIALIZED MEMORY CORRUPTION vulnerability. It affects IE 5.01, 6, and 7 and arises when a prototype variable points to a table cell, enabling remote code execution via a specially crafted webpage. The issue is part of the MS07-033 update (Cumulative Secur...

CVE-2007-3902

CVE-2007-3902 is a use-after-free/ memory corruption vulnerability in Microsoft Internet Explorer 5.01–7, caused by the CRecalcProperty function in mshtml.dll. Attackers could trigger arbitrary code execution by calling the setExpression method and then modifying an element’s outerHTML, leading t...

CVE-2008-0454

The CVE-2008-0454 entry concerns Skype on Windows where cross-zone scripting is possible through the Internet Explorer web control. Specifically, in Skype 3.6.0.244 (and earlier 3.5.x/3.6.x), a user-assisted attacker could inject arbitrary web script/HTML in the Local Machine Zone via the Title f...

CVE-2009-1140

CVE-2009-1140 affects Microsoft Internet Explorer versions including IE 5.01 SP4; 6 SP1; 6 and 7 for Windows XP SP2/SP3; 6/7 for Server 2003 SP2; 7 for Vista SP1/SP2; and 7 for Server 2008 SP2. The vulnerability is a cross-domain information disclosure caused by IE failing to prevent HTML renderi...

CVE-2010-0492

Microsoft Internet Explorer 8 contains a use-after-free in mstime.dll involving the CTimeAction object during TIME2 handling, causing memory corruption and remote code execution when a user visits a crafted page. The issue affects IE 8 and is officially addressed by Microsoft in MS10-018 (Cumulat...

CVE-2011-1250

Microsoft Internet Explorer 6–9 is affected by a memory-corruption vulnerability in Link Property Processing, due to access of objects that are uninitialized or deleted. NSFOCUS describes the root cause as processing malformed Link objects leading to unauthorized memory access and potential code ...

CVE-2014-4107

CVE-2014-4107 is part of a family of Microsoft Internet Explorer memory corruption vulnerabilities from 2014. Connected advisories (ZDI-14-306, -14-308, -14-317, -14-315, -14-312, -14-316, -14-318 and others) describe multiple IE Use-After-Free flaws (in components such as CAttrArray, CFieldSetLa...

CVE-2015-1766

CVE-2015-1766 concerns Microsoft Internet Explorer 6–11, where a crafted web site can cause memory corruption leading to remote code execution or a denial of service. The vulnerability is described consistently across sources as a memory corruption issue in IE’s handling of web content, affecting...

CVE-2015-2487

CVE-2015-2487 corresponds to a set of memory corruption vulnerabilities in Microsoft Internet Explorer 7–11 and related Edge components, exploitable via a crafted web site to allow remote code execution or memory corruption leading to a crash/DoS. The connected OpenVAS entry specifically notes mu...

CVE-2016-0109

CVE-2016-0109 affects Microsoft Internet Explorer 11 and Microsoft Edge. The weakness is memory corruption that can be triggered by a crafted web site, allowing remote code execution or a denial of service. Affected products are IE11 and Edge, with root cause described as improper handling of mem...

CVE-2016-1108

CVE-2016-1108 is an Adobe Flash Player vulnerability (affecting 21.0.0.213 and earlier in Flash libraries used by IE/Edge) described as a use-after-free leading to remote code execution. Public writeups and advisories (APSB16-15) attribute exploitation to crafted SWF handling, with patches releas...

CVE-2016-7196

CVE-2016-7196 affects Microsoft Internet Explorer 10/11 and Microsoft Edge. The vulnerability enables remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. Severity is HIGH (CVSS v3: 7.5) with network access, user interaction required....

CVE-2016-7278

CVE-2016-7278 affects Microsoft Internet Explorer 9–11 and is described as an information-disclosure vulnerability by the Windows Hyperlink Object Library, allowing remote attackers to read memory contents via a crafted web site. Affected product: IE (IE9–IE11). Root cause: information disclosure...

CVE-2017-8608

CVE-2017-8608 is described as a remote code execution vulnerability in the Microsoft browser JavaScript engine, caused by memory corruption when handling objects in memory. Affected products include Microsoft browsers on Windows platforms (Internet Explorer/Edge components inside Windows 7/8/10 f...

CVE-2018-0988

CVE-2018-0988 is a remote code execution vulnerability in the Internet Explorer scripting engine related to memory object handling. Affected products include IE9, IE10, and IE11. Root cause described as memory handling issues in the scripting engine that can lead to code execution. The CVSSbase i...

CVE-2018-1001

CVE-2018-1001 describes a remote code execution flaw in Microsoft Internet Explorer caused by how the scripting engine handles objects in memory (Scripting Engine Memory Corruption). Affected products include Internet Explorer 9, 10, and 11. The vulnerability stems from memory handling in the scr...

CVE-2019-0761

Technical details for CVE-2019-0761 are not publicly available in the provided documents; the corpus mentions IE security feature bypass but does not disclose affected components, versions, root cause, or remediation. Monitor for updates.

CVE-2005-1990

CVE-2005-1990 affects Internet Explorer 5.0, 5.5, and 6.0. The vulnerability arises from improper instantiation of certain COM objects as ActiveX controls, causing a buffer/memory corruption in the host process and potentially enabling command execution or a crash. Affected components include a s...

CVE-2008-4029

CVE-2008-4029 relates to a cross-domain scripting vulnerability in Microsoft XML Core Services 3.0/4.0 (MSXML) used by Internet Explorer. The issue stems from improper error checking for external DTDs in XML documents, enabling a crafted XML to leak information to another domain. Microsoft MS08-0...

CVE-2009-2057

Microsoft Internet Explorer prior to version 8 is described as vulnerable to an SSL-tampering style attack where the HTTP Host header is used to determine the document context in a 4xx or 5xx CONNECT response from a proxy. This allows a man-in-the-middle attacker to modify the CONNECT response an...

CVE-2009-3671

CVE-2009-3671 concerns Microsoft Internet Explorer 8. The issue is a memory handling vulnerability where an object that is either not properly initialized or has been deleted is accessed, causing memory corruption and enabling remote code execution. The vulnerability is described as Uninitialized...

CVE-2014-4105

CVE-2014-4105 is linked to multiple Microsoft Internet Explorer use-after-free vulnerabilities described in ZDI advisories (e.g., ZDI-14-306, -14-308, -14-317, -14-315, -14-312, -14-316, -14-318, -14-314, -14-313). These entries indicate remote code execution via crafted web content, requiring us...

CVE-2014-4132

The CVE-2014-4132 entry concerns Microsoft Internet Explorer 11 memory‑corruption vulnerabilities exploitable via a crafted web site, enabling remote code execution or a denial of service. The related connected records show the broader family (CVE-2014-4130 and CVE-2014-4138) and note that CVE-20...

CVE-2014-6342

The CVE-2014-6342 entry concerns Microsoft Internet Explorer 9 . The vulnerability involves a memory corruption flaw triggered by visiting a crafted web site, enabling remote code execution or, per the description, a denial of service. The issue is linked to the IE memory corruption family and is...

CVE-2014-6345

CVE-2014-6345 affects Microsoft Internet Explorer 9 and 10 and is a cross-domain information-disclosure vulnerability caused by improper enforcement of cross-domain policies, enabling remote attackers to read content from a different domain or security zone via a crafted webpage. The issue is add...