CVE-2010-1261

CVE-2010-1261 : A memory-corruption vulnerability in the Internet Explorer 8 Developer Toolbar (IE8) affects IE8 SP1/SP2/SP3. The connected MS knowledge base MS10-035 documents a remote code execution risk when processing a specially crafted page, due to uninitialized/deleted objects. Microsoft’s...

CVE-2014-4130

Technical details for CVE-2014-4130 are not publicly available in the provided documents. Monitor for updates.

CVE-2014-6363

CVE-2014-6363 affects the Microsoft VBScript engine (versions 5.6–5.8) used with Internet Explorer and other products. The issue is a memory corruption vulnerability in VBScript CRegExp/engine handling that can allow remote code execution when a user visits a crafted web page. Exploitation is evi...

CVE-2015-1743

Microsoft Internet Explorer (IE) 7–11 contains an elevation-of-privilege vulnerability in the ActiveX Broker (CVE-2015-1743). A crafted web page can escape EPM and allow arbitrary code execution in an IE process, potentially compromising the user context. The issue is addressed by Microsoft via M...

CVE-2016-4109

Technical details for CVE-2016-4109 are not publicly available in the provided documents; no affected product/version, impact or remediation details are specified here. Monitor for updates.

CVE-2018-0978

CVE-2018-0978 describes a remote code execution vulnerability in Microsoft Internet Explorer caused by improper handling of memory objects. Affected products include Internet Explorer 9, 10, and 11. The underlying issue is memory corruption that could allow arbitrary code execution if a user open...

CVE-2019-1038

CVE-2019-1038 is a remote code execution vulnerability in Microsoft browsers where memory can be corrupted while handling objects, allowing arbitrary code execution in the caller’s context. Exploitation could occur when a user visits a malicious website or a compromised site hosting crafted conte...

CVE-2006-4868

CVE-2006-4868: A stack-based buffer overflow in VGX.dll (VML processing) used by Microsoft Outlook and Internet Explorer on Windows XP SP2 enables remote code execution via a crafted VML rect tag with a long fill parameter. Affected: Internet Explorer/VML handling. Impact per sources: arbitrary c...

CVE-2009-2576

CVE-2009-2576 refers to a Denial of Service in Microsoft Internet Explorer (IE) where a long Unicode string passed to the write method can consume CPU/memory. The OpenVAS entry OpenVAS:900400 explicitly links CVE-2009-2576 to IE Unicode String DoS and lists a base CVSS v2 score of 5.0 (AV:N/AC:L/...

CVE-2010-0492

Microsoft Internet Explorer 8 contains a use-after-free in mstime.dll involving the CTimeAction object during TIME2 handling, causing memory corruption and remote code execution when a user visits a crafted page. The issue affects IE 8 and is officially addressed by Microsoft in MS10-018 (Cumulat...

CVE-2015-2397

CVE-2015-2397 refers to a memory corruption vulnerability in Microsoft Internet Explorer (IE) versions 6–11 that can enable remote code execution or a denial of service when a user visits a crafted web page. The issue arises from improper handling of in-memory objects after deletion, per connecte...

CVE-2015-6155

CVE-2015-6155 affects Microsoft Internet Explorer 10/11 and Microsoft Edge. A remote attacker could execute arbitrary code or cause a denial of service via a crafted web site due to memory corruption in browser handling, leading to potential remote code execution. Public advisories MS15-124 (IE) ...

CVE-2016-0109

CVE-2016-0109 affects Microsoft Internet Explorer 11 and Microsoft Edge. The weakness is memory corruption that can be triggered by a crafted web site, allowing remote code execution or a denial of service. Affected products are IE11 and Edge, with root cause described as improper handling of mem...

CVE-2016-3247

CVE-2016-3247 affects Microsoft Internet Explorer 11 and Microsoft Edge, allowing remote code execution or memory corruption via a crafted web site. The root cause is memory handling in the browser when loading objects, enabling code execution with the attacker’s privileges. In the wild exploits ...

CVE-2016-3260

The CVE-2016-3260 issue affects Microsoft’s scripting engines (JScript 9, VBScript, and Chakra) used by Internet Explorer 11 and Microsoft Edge. A memory corruption flaw in the engines could allow remote code execution or a denial of service when processing a crafted web site, as described in the...

CVE-2016-7199

CVE-2016-7199 affects Microsoft Internet Explorer (IE) versions 9–11 and Microsoft Edge, where a crafted web site can bypass the Same Origin Policy to disclose sensitive window-state information (information-disclosure vulnerability). Root cause is tied to how IE/Edge handle window/state data acr...

CVE-2017-0033

CVE-2017-0033 affects Microsoft Internet Explorer 11 and Microsoft Edge, enabling remote attackers to spoof web content via a crafted web site (the vulnerability is distinct from CVE-2017-0012 and CVE-2017-0069). Based on the connected documents, the exploit surface is network-propagated and leve...

CVE-2017-0201

The connected Nessus entry confirms CVE-2017-0201 is a remote code execution in Internet Explorer related to memory corruption in the scripting engine when handling objects in memory. The vulnerability affects Internet Explorer’s scripting engines (JScript/VBScript) and could allow code execution...

CVE-2017-11793

CVE-2017-11793 affects Internet Explorer on multiple Windows editions where the scripting engine’s memory handling of objects can be abused to execute arbitrary code in the user context. Root cause: memory corruption in the scripting engine. Impact: remote code execution with high severity (per C...

CVE-2017-11856

Technical details about CVE-2017-11856 are not provided in the connected documents; the initial description is the only public detail available here. Monitor for vendor advisories and security updates.

CVE-2019-0930

CVE-2019-0930 refers to an information-disclosure vulnerability in Microsoft Internet Explorer where objects in memory are improperly handled. The issue affects IE versions 9–11 and can disclose sensitive information, with a confidentiality impact described as HIGH in CVE references. The NVD entr...

CVE-2001-0338

The CVE-2001-0338 entry corresponds to Internet Explorer 5.5 and earlier failing to properly validate digital certificates when Certificate Revocation List (CRL) checking is enabled. The underlying issue is that, during CRL checking, IE does not consistently perform essential validity checks (e.g...

CVE-2007-3902

CVE-2007-3902 is a use-after-free/ memory corruption vulnerability in Microsoft Internet Explorer 5.01–7, caused by the CRecalcProperty function in mshtml.dll. Attackers could trigger arbitrary code execution by calling the setExpression method and then modifying an element’s outerHTML, leading t...

CVE-2008-0454

The CVE-2008-0454 entry concerns Skype on Windows where cross-zone scripting is possible through the Internet Explorer web control. Specifically, in Skype 3.6.0.244 (and earlier 3.5.x/3.6.x), a user-assisted attacker could inject arbitrary web script/HTML in the Local Machine Zone via the Title f...

CVE-2011-1250

Microsoft Internet Explorer 6–9 is affected by a memory-corruption vulnerability in Link Property Processing, due to access of objects that are uninitialized or deleted. NSFOCUS describes the root cause as processing malformed Link objects leading to unauthorized memory access and potential code ...

CVE-2014-0297

CVE-2014-0297 is a vulnerability in Microsoft Internet Explorer (IE) 8–11 described as allowing an attacker to remotely execute arbitrary code or cause a denial of service via a crafted web site, commonly referred to as the Internet Explorer Memory Corruption Vulnerability . The connected records...

CVE-2014-4132

The CVE-2014-4132 entry concerns Microsoft Internet Explorer 11 memory‑corruption vulnerabilities exploitable via a crafted web site, enabling remote code execution or a denial of service. The related connected records show the broader family (CVE-2014-4130 and CVE-2014-4138) and note that CVE-20...

CVE-2016-1108

CVE-2016-1108 is an Adobe Flash Player vulnerability (affecting 21.0.0.213 and earlier in Flash libraries used by IE/Edge) described as a use-after-free leading to remote code execution. Public writeups and advisories (APSB16-15) attribute exploitation to crafted SWF handling, with patches releas...

CVE-2016-3273

CVE-2016-3273 is a browser information disclosure vulnerability in the XSS Filter of Microsoft Internet Explorer 9–11 and Microsoft Edge. The root cause is improper restriction of JavaScript by the XSS Filter, allowing remote attackers to obtain sensitive information via a crafted website. The is...

CVE-2016-7278

CVE-2016-7278 affects Microsoft Internet Explorer 9–11 and is described as an information-disclosure vulnerability by the Windows Hyperlink Object Library, allowing remote attackers to read memory contents via a crafted web site. Affected product: IE (IE9–IE11). Root cause: information disclosure...

CVE-2017-8608

CVE-2017-8608 is described as a remote code execution vulnerability in the Microsoft browser JavaScript engine, caused by memory corruption when handling objects in memory. Affected products include Microsoft browsers on Windows platforms (Internet Explorer/Edge components inside Windows 7/8/10 f...

CVE-2017-8736

CVE-2017-8736 is an information-disclosure vulnerability affecting Internet Explorer in Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1/RT 8.1, Windows Server 2012 R2, and Internet Explorer/Edge in Windows 10 (Gold and various builds). The root cause, as described in connected Nessus data,...

CVE-2018-0988

CVE-2018-0988 is a remote code execution vulnerability in the Internet Explorer scripting engine related to memory object handling. Affected products include IE9, IE10, and IE11. Root cause described as memory handling issues in the scripting engine that can lead to code execution. The CVSSbase i...

CVE-2018-1001

CVE-2018-1001 describes a remote code execution flaw in Microsoft Internet Explorer caused by how the scripting engine handles objects in memory (Scripting Engine Memory Corruption). Affected products include Internet Explorer 9, 10, and 11. The vulnerability stems from memory handling in the scr...

CVE-2004-0867

CVE-2004-0867 affects Mozilla Firefox 0.9.2 by allowing websites to set cookies for country-specific top‑level domains (e.g., .ltd.uk, .plc.uk, .sch.uk), which could enable a session‑fixation attack and session hijack. The note indicates 2.x may also be affected. Technical details in the provided...

CVE-2008-4029

CVE-2008-4029 relates to a cross-domain scripting vulnerability in Microsoft XML Core Services 3.0/4.0 (MSXML) used by Internet Explorer. The issue stems from improper error checking for external DTDs in XML documents, enabling a crafted XML to leak information to another domain. Microsoft MS08-0...

CVE-2009-1140

CVE-2009-1140 affects Microsoft Internet Explorer versions including IE 5.01 SP4; 6 SP1; 6 and 7 for Windows XP SP2/SP3; 6/7 for Server 2003 SP2; 7 for Vista SP1/SP2; and 7 for Server 2008 SP2. The vulnerability is a cross-domain information disclosure caused by IE failing to prevent HTML renderi...

CVE-2009-2057

Microsoft Internet Explorer prior to version 8 is described as vulnerable to an SSL-tampering style attack where the HTTP Host header is used to determine the document context in a 4xx or 5xx CONNECT response from a proxy. This allows a man-in-the-middle attacker to modify the CONNECT response an...

CVE-2010-0245

CVE-2010-0245 describes an Uninitialized Memory Corruption vulnerability in Microsoft Internet Explorer 8 where accessing an uninitialized or deleted in-memory object can lead to remote code execution. The connected KB (MS10-002) confirms this class of issue affects Internet Explorer and provides...

CVE-2014-4051

Microsoft Internet Explorer 8–11 is affected by CVE-2014-4051, where memory corruption can be triggered by a crafted web site, potentially allowing remote code execution or a denial of service. The vulnerability is one of several IE memory-corruption-related issues reported in 2014 (distinct from...

CVE-2014-6342

The CVE-2014-6342 entry concerns Microsoft Internet Explorer 9 . The vulnerability involves a memory corruption flaw triggered by visiting a crafted web site, enabling remote code execution or, per the description, a denial of service. The issue is linked to the IE memory corruption family and is...

CVE-2014-6345

CVE-2014-6345 affects Microsoft Internet Explorer 9 and 10 and is a cross-domain information-disclosure vulnerability caused by improper enforcement of cross-domain policies, enabling remote attackers to read content from a different domain or security zone via a crafted webpage. The issue is add...

CVE-2015-1626

CVE-2015-1626 affects Microsoft Internet Explorer 11 and describes a memory corruption vulnerability that allows remote code execution or a DoS when visiting a crafted web page. The root cause is memory handling flaws in IE 11 (distinct from CVE-2015-0056/-1623). Microsoft issued a fix via MS15-0...

CVE-2015-1766

CVE-2015-1766 concerns Microsoft Internet Explorer 6–11, where a crafted web site can cause memory corruption leading to remote code execution or a denial of service. The vulnerability is described consistently across sources as a memory corruption issue in IE’s handling of web content, affecting...

CVE-2016-0111

CVE-2016-0111 affects Microsoft Internet Explorer 9–11 and Microsoft Edge. It is a memory corruption/remote code execution vulnerability triggered by visiting a crafted site, caused by improper memory handling in the browser. Exploitation existed (e.g., Exploit-DB) and patches were released (MS16...

CVE-2016-1104

Technical details for CVE-2016-1104 are not publicly provided in the supplied documents. Monitor for updates; currently, no affected products, exact vulnerability, vectors, or remediation are disclosed here.

CVE-2016-7196

CVE-2016-7196 affects Microsoft Internet Explorer 10/11 and Microsoft Edge. The vulnerability enables remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. Severity is HIGH (CVSS v3: 7.5) with network access, user interaction required....

CVE-2017-8653

CVE-2017-8653 is a memory-corruption vulnerability in Microsoft browsers on Windows platforms (several Windows versions listed in the initial entry) that allows remote code execution when the browser improperly accesses objects in memory. The issue is categorized under a browser memory corruption...

CVE-2018-8457

Technical details about CVE-2018-8457 are not provided in the connected documents; the initial description is high-level. Monitor for updates.

CVE-2019-0666

CVE-2019-0666 describes a remote code execution vulnerability in the Windows VBScript Engine, arising from how the engine handles objects in memory. The flaw is defined as a memory-object handling issue within VBScript, and is noted as distinct from CVE-2019-0665, CVE-2019-0667, and CVE-2019-0772...