CVE-2017-8653

CVE-2017-8653 is a memory-corruption vulnerability in Microsoft browsers on Windows platforms (several Windows versions listed in the initial entry) that allows remote code execution when the browser improperly accesses objects in memory. The issue is categorized under a browser memory corruption...

CVE-2018-1001

CVE-2018-1001 describes a remote code execution flaw in Microsoft Internet Explorer caused by how the scripting engine handles objects in memory (Scripting Engine Memory Corruption). Affected products include Internet Explorer 9, 10, and 11. The vulnerability stems from memory handling in the scr...

CVE-2019-0666

CVE-2019-0666 describes a remote code execution vulnerability in the Windows VBScript Engine, arising from how the engine handles objects in memory. The flaw is defined as a memory-object handling issue within VBScript, and is noted as distinct from CVE-2019-0665, CVE-2019-0667, and CVE-2019-0772...

CVE-2019-0761

Technical details for CVE-2019-0761 are not publicly available in the provided documents; the corpus mentions IE security feature bypass but does not disclose affected components, versions, root cause, or remediation. Monitor for updates.

CVE-2019-0995

CVE-2019-0995 is described as a security feature bypass affecting urlmon.dll in Internet Explorer when handling certain Mark of the Web queries. The vulnerability is characterized as a bypass of security restrictions (IE) with potential HIGH impact per CVSSv3: network access, no privileges requir...

CVE-2002-0052

CVE-2002-0052 corresponds to an Internet Explorer vulnerability where incorrect VBScript handling in cross-domain frames can allow a remote attacker to read local files. Affected IE versions include 5.01, 5.5, and 6.0. The flaw arises from VBScript handling in domain security checks, enabling inf...

CVE-2004-0867

CVE-2004-0867 affects Mozilla Firefox 0.9.2 by allowing websites to set cookies for country-specific top‑level domains (e.g., .ltd.uk, .plc.uk, .sch.uk), which could enable a session‑fixation attack and session hijack. The note indicates 2.x may also be affected. Technical details in the provided...

CVE-2005-1990

CVE-2005-1990 affects Internet Explorer 5.0, 5.5, and 6.0. The vulnerability arises from improper instantiation of certain COM objects as ActiveX controls, causing a buffer/memory corruption in the host process and potentially enabling command execution or a crash. Affected components include a s...

CVE-2009-1335

Microsoft Internet Explorer Denial of Service vulnerability (CVE-2009-1335) affects IE7 and IE8 on Windows XP and Vista. A remote attacker can cause an application hang by sending a large document composed of unprintable characters (MSRC 9011jr). This is a DoS condition; no specific exploit detai...

CVE-2009-2057

Microsoft Internet Explorer prior to version 8 is described as vulnerable to an SSL-tampering style attack where the HTTP Host header is used to determine the document context in a 4xx or 5xx CONNECT response from a proxy. This allows a man-in-the-middle attacker to modify the CONNECT response an...

CVE-2010-0245

CVE-2010-0245 describes an Uninitialized Memory Corruption vulnerability in Microsoft Internet Explorer 8 where accessing an uninitialized or deleted in-memory object can lead to remote code execution. The connected KB (MS10-002) confirms this class of issue affects Internet Explorer and provides...

CVE-2014-0274

Microsoft Internet Explorer (Windows) is affected by memory corruption/overflow vulnerabilities in the IE 9–11 range, exploitable remotely through specially crafted web content. The Kaspersky entry notes multiple vulnerabilities (overflows and other issues) that can allow remote code execution, p...

CVE-2014-4079

Microsoft Internet Explorer 6–11 is affected by a memory corruption vulnerability that can be exploited via a crafted web page to execute arbitrary code or cause a denial of service. The connected ZDI advisories describe multiple Use-After-Free variants in IE components (e.g., CAttrArray, CFieldS...

CVE-2014-4105

CVE-2014-4105 is linked to multiple Microsoft Internet Explorer use-after-free vulnerabilities described in ZDI advisories (e.g., ZDI-14-306, -14-308, -14-317, -14-315, -14-312, -14-316, -14-318, -14-314, -14-313). These entries indicate remote code execution via crafted web content, requiring us...

CVE-2015-1741

Microsoft Internet Explorer versions 9–11 are affected by CVE-2015-1741, a memory corruption vulnerability triggered by a crafted web page that can allow remote code execution or cause a denial of service. The issue is documented as a separate vulnerability from CVE-2015-1752. Public references i...

CVE-2015-2491

Microsoft Internet Explorer 9–11 (and Microsoft Edge) are associated with memory corruption vulnerabilities described as CVE-2015-2491, a member of the same vulnerability family as CVE-2015-2485 and CVE-2015-2541. Exploitation details are not provided in the documents, but the OpenVAS entry refer...

CVE-2016-1104

Technical details for CVE-2016-1104 are not publicly provided in the supplied documents. Monitor for updates; currently, no affected products, exact vulnerability, vectors, or remediation are disclosed here.

CVE-2016-3295

CVE-2016-3295 is the Microsoft Browser Memory Corruption Vulnerability affecting Internet Explorer 10/11 and Microsoft Edge. The issue allows remote attackers to execute arbitrary code or cause a memory corruption-based DoS via a crafted web site. Root cause is memory handling in browser objects,...

CVE-2016-4110

CVE-2016-4110 is a use-after-free vulnerability in Adobe Flash Player (and components in related Adobe Flash libraries) that, per connected sources, could lead to arbitrary code execution. Public listings indicate this CVE is part of a set of Flash vulnerabilities fixed in the 2016 updates; multi...

CVE-2017-8733

CVE-2017-8733 : IE spoofing vulnerability in Internet Explorer affects multiple Windows releases (Windows 7 SP1, Server 2008 SP2/R2, 8.1/RT 8.1, 2012/R2, 10 variants). Root cause: handling of specific HTML content in IE can mislead a user into thinking they visited a legitimate site. The connecte...

CVE-2019-1192

Technical details for CVE-2019-1192 are not publicly available in the provided documents. Monitor for updates from Microsoft MSRC and NVD.

CVE-2006-1303

The CVE-2006-1303 issue affects Microsoft Internet Explorer 5.01 SP4 and IE 6 SP1 (and earlier) via remote instantiation of certain COM objects not meant for IE, notably several DXImageTransform.Microsoft.* ActiveX controls (MMSpecialEffect1Input, MMSpecialEffect1Input.1, MMSpecialEffect2Inputs, ...

CVE-2010-0489

The CVE-2010-0489 entry corresponds to a Race Condition Memory Corruption vulnerability in Microsoft Internet Explorer (affecting IE 5.01 SP4, 6, 6 SP1, and 7). The connected sources confirm a remote code execution scenario triggered by specially crafted HTML/Web content, with exploitation possib...

CVE-2014-1751

CVE-2014-1751 is a memory-corruption vulnerability in Microsoft Internet Explorer (IE) that can be triggered by visiting a crafted web site, enabling remote code execution or memory corruption leading to a denial of service. The IE family (versions 6–11) is affected; the underlying issue is a mem...

CVE-2014-4137

CVE-2014-4137 affects Microsoft Internet Explorer 6 and 7, allowing remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. Root cause: memory corruption in IE’s handling of web content. Impact: remote code execution or memory-based DoS ...

CVE-2015-1736

Technical details for CVE-2015-1736 are not publicly available in the provided documents. Monitor for updates from NVD/CVE sources for affected products, impact, and fixes.

CVE-2015-2485

CVE-2015-2485 affects Microsoft Internet Explorer 9–11 and Microsoft Edge, enabling memory corruption via a crafted web site. The vulnerability is described as a memory corruption issue potentially allowing remote code execution or DoS. Connected data references to MS15-095 (security update) as a...

CVE-2016-4115

Technical details for CVE-2016-4115 are not publicly available in the provided documents. No affected products, vulnerable components, impact, or remediation are specified here. Monitor for updates as additional information becomes available.

CVE-2018-8351

CVE-2018-8351 is an information-disclosure vulnerability in affected Microsoft browsers (Internet Explorer 11, Edge, and Internet Explorer 10) caused by improper cross-frame interaction. The NVD and related records describe the issue as a cross-frame interaction flaw enabling partial confidential...

CVE-2018-8491

Technical details about CVE-2018-8491 are not publicly available in the provided connected documents. No specifics on affected products, versions, root cause, or fixes are given here. Monitor the EUVD/CNVD/CVE lists for updates.

CVE-2001-0339

Summary: CVE-2001-0339 corresponds to a Web page spoofing vulnerability in Internet Explorer 5.5 and earlier, where the address bar could display a URL different from the actual page, enabling phishing-type spoofing. The connected OpenVAS entries reference Internet Explorer patches (e.g., 890923/...

CVE-2009-3674

CVE-2009-3674 affects Microsoft Internet Explorer 8, describing an Uninitialized Memory Corruption vulnerability in how IE8 handles memory objects (uninitialized or deleted) that can enable remote code execution. Multiple records in the connected data corroborate the same memory-corruption vector...

CVE-2010-0027

CVE-2010-0027 documents a vulnerability in URL validation in Internet Explorer (IE 5.01, 6, 6 SP1, 7, 8) and in the ShellExecute API on Windows 2000 SP4, XP SP2/SP3, and Server 2003 SP2, where input parameters in crafted URLs could allow remote code execution by an attacker. The connected MSKB en...

CVE-2010-3243

CVE-2010-3243 describes an HTML sanitization vulnerability (HTML Sanitization Vulnerability) causing cross-site scripting in Microsoft Internet Explorer 8 and in SharePoint components: Windows SharePoint Services 3.0 SP2 and Office SharePoint Server 2007 SP2. The root cause is improper filtering ...

CVE-2014-0267

Microsoft Internet Explorer 11 contains memory‑corruption vulnerabilities that can be exploited remotely via specially crafted web content to execute arbitrary code or cause memory corruption/DoS. The Kaspersky entry (KLA10602) notes multiple IE vulnerabilities, including overflows, exploitable v...

CVE-2014-4127

CVE-2014-4127 affects Microsoft Internet Explorer 6–10 (as described in the initial entry; some connected sources also reference IE7–10) and is caused by a memory corruption issue triggered by a crafted web page. This vulnerability allows remote attackers to execute arbitrary code or cause a deni...

CVE-2014-6350

CVE-2014-6350 affects Microsoft Internet Explorer 10/11 in Enhanced Protected Mode, enabling sandbox escape via a memory-disclosure/IPC weakness in the IE broker and Free Threaded Marshaler (FTM). The exploit chain described by Project Zero and related writeups shows how an attacker could read br...

CVE-2015-1730

CVE-2015-1730 affects Microsoft Internet Explorer (IE) versions 6–11, with IE9 specifically noted in the initial entry. The vulnerability is a memory corruption issue triggered by a crafted web page, described in connected sources as a memory corruption in the JavaScript engine (notably related t...

CVE-2015-1737

CVE-2015-1737 corresponds to a memory corruption vulnerability in Microsoft Internet Explorer 10 and 11. The flaw allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. It is described as a distinct vulnerability from CVE-2015-1731, CVE-2015-1736, a...

CVE-2015-2442

The CVE-2015-2442 entry concerns Microsoft Internet Explorer (IE) versions 8–11 and Edge, described as a memory corruption vulnerability that allows remote code execution or denial of service when a user visits a crafted site. The description explicitly labels it as a Memory Corruption Vulnerabil...

CVE-2015-6088

CVE-2015-6088 affects Internet Explorer 9–11 and Microsoft Edge, enabling remote ASLR bypass via a crafted webpage. The issue is addressed by MS15-112 (IE) and MS15-113 (Edge). Remediation: apply the Microsoft security updates referenced in the connected MSB advisories (MS15-112 for IE, MS15-113 ...

CVE-2016-3212

CVE-2016-3212: Internet Explorer XSS Filter Vulnerability. Affected: IE 9–11 on Windows platforms; root cause: IE XSS Filter fails to properly identify JavaScript, enabling remote XSS via crafted sites. Impact: potential remote code execution through IE when processing malicious content (per Micr...

CVE-2016-3288

CVE-2016-3288 affects Microsoft Internet Explorer 11. It is a memory corruption vulnerability in IE11 that can be triggered by visiting a crafted webpage, enabling remote code execution. Multiple sources confirm exploitation exists (e.g., exploit-db entry for CVE-2016-3288). The issue is distinct...

CVE-2016-3290

Technical details for CVE-2016-3290 are not provided in the supplied documents. Public details about affected components, impact, or fixes are not available here; monitor for updates from authoritative sources.

CVE-2016-7227

CVE-2016-7227 affects Microsoft Internet Explorer 9–11 and Microsoft Edge, enabling remote attackers to determine the existence of local files via unspecified vectors (Information Disclosure). The issue is documented by NVD with CVSS low impact and network attack vector but no explicit exploit de...

CVE-2018-8315

CVE-2018-8315 is an information-disclosure vulnerability in the browser scripting engine. Affected components include ChakraCore, Internet Explorer 11, Microsoft Edge, and Internet Explorer 10, where improper handling of object types leads to partial confidentiality/integrity impact. The CVE’s ba...

CVE-2018-8316

CVE-2018-8316 is a remote code execution flaw in Internet Explorer 10–11, triggered when hyperlinks are not properly validated before loading executable libraries. The underlying issue is improper hyperlink validation, allowing a crafted link to cause code execution on the affected Windows compon...

CVE-2018-8570

CVE-2018-8570 is an Internet Explorer 11 remote code‑execution vulnerability tied to memory handling when IE accesses objects. The issue could allow an attacker to run arbitrary code in the context of the current user, with privileges equal to that user, typically via visiting a specially crafted...

CVE-2004-0214

CVE-2004-0214 is a remote code execution vulnerability in the Windows Shell (Shell32) that stems from an unchecked/buffered input condition in the Shell’s handling of messages when launching applications. An attacker could entice a user to visit a malicious Web page or open a crafted file, potent...

CVE-2004-0841

The CVE-2004-0841 entry corresponds to Internet Explorer 6.x vulnerability commonly called Script in Image Tag File Download (also HijackClick 3). The connected advisories describe this as an IE vulnerability that allows a remote attacker to escalate privileges by abusing script execution in imag...