CVE-2016-4108

CVE-2016-4108 is a use-after-free flaw in Adobe Flash Player affecting Flash Player 21.0.0.213 and earlier (as used in IE/Edge). Attack vectors are not specified in the description; exploitation is noted in some sources (e.g., CIRCL/Exploits DB). The issue is linked with multiple related CVEs and...

CVE-2016-4110

CVE-2016-4110 is a use-after-free vulnerability in Adobe Flash Player (and components in related Adobe Flash libraries) that, per connected sources, could lead to arbitrary code execution. Public listings indicate this CVE is part of a set of Flash vulnerabilities fixed in the 2016 updates; multi...

CVE-2016-4111

Technical details for CVE-2016-4111 are not publicly provided in the supplied documents. Monitor for updates; current materials do not reveal affected products, root cause, or fixes for this entry.

CVE-2017-8602

CVE-2017-8602 affects Microsoft browsers on Windows (multiple editions listed in the CVE entry) and is a spoofing vulnerability in how HTTP content is parsed. The connected documents (Nessus/OpenVAS plugins) confirm the issue is tied to the browser parsing logic (HTTP content) and impact is spoof...

CVE-2018-0927

CVE-2018-0927 relates to an information disclosure in Microsoft browsers (Internet Explorer and Edge) due to how objects are handled in memory. The connected Microsoft KBs (March 2018 updates) describe IE security updates that address multiple memory- and rendering-related issues, including fixes...

CVE-2018-8351

CVE-2018-8351 is an information-disclosure vulnerability in affected Microsoft browsers (Internet Explorer 11, Edge, and Internet Explorer 10) caused by improper cross-frame interaction. The NVD and related records describe the issue as a cross-frame interaction flaw enabling partial confidential...

CVE-2019-0665

CVE-2019-0665/66/67/72 describe a remote code execution in the Windows VBScript Engine caused by how the engine handles objects in memory. The CVSS metrics in the Initial document indicate high impact (C/I/A High) with network access, required user interaction, and no privileges required. The CIR...

CVE-2001-0339

Summary: CVE-2001-0339 corresponds to a Web page spoofing vulnerability in Internet Explorer 5.5 and earlier, where the address bar could display a URL different from the actual page, enabling phishing-type spoofing. The connected OpenVAS entries reference Internet Explorer patches (e.g., 890923/...

CVE-2008-7295

CVE-2008-7295 : Affects Microsoft Internet Explorer by failing to properly restrict modifications to cookies set over HTTPS, allowing a man-in-the-middle attacker to overwrite or delete cookies via a Set-Cookie header in an HTTP response. Root cause cited as lack of HTTP Strict Transport Security...

CVE-2010-0267

CVE-2010-0267 affects Microsoft Internet Explorer 6/6 SP1/7. The issue is remote code execution due to improper handling of memory objects (uninitialized or deleted), causing memory corruption. Multiple connected advisories confirm exploitation vectors via malicious web pages and the potential fo...

CVE-2010-0489

The CVE-2010-0489 entry corresponds to a Race Condition Memory Corruption vulnerability in Microsoft Internet Explorer (affecting IE 5.01 SP4, 6, 6 SP1, and 7). The connected sources confirm a remote code execution scenario triggered by specially crafted HTML/Web content, with exploitation possib...

CVE-2014-0325

Consolidated details for CVE-2014-0325 show a memory corruption use-after-free in Microsoft Internet Explorer 9 caused by improper processing of CElement objects when loading crafted web content. This vulnerability enables remote code execution or memory corruption and is associated with the MS14...

CVE-2014-4088

CVE-2014-4088 corresponds to a Microsoft Internet Explorer memory corruption vulnerability affecting IE 6–11 that could allow remote code execution when a user visits a crafted page. Connected advisories (ZDI-14-306, -308, -317, -315, -312, -316, -318, -314, -313, and others) describe multiple Us...

CVE-2014-6375

CVE-2014-6375 concerns Microsoft Internet Explorer 8, where a crafted web page can trigger a memory corruption vulnerability that allows remote code execution or a denial of service. Public exploits exist, and the issue is associated with IE’s handling of certain objects during page rendering. Th...

CVE-2015-1750

Microsoft Internet Explorer 11 is the affected component for CVE-2015-1750. The vulnerability involves memory corruption in IE11 triggered by visiting a crafted web page, allowing remote code execution or a denial of service. The available sources identify IE11 and the memory corruption vector bu...

CVE-2016-3212

CVE-2016-3212: Internet Explorer XSS Filter Vulnerability. Affected: IE 9–11 on Windows platforms; root cause: IE XSS Filter fails to properly identify JavaScript, enabling remote XSS via crafted sites. Impact: potential remote code execution through IE when processing malicious content (per Micr...

CVE-2016-7282

Technical details for CVE-2016-7282 are not provided in the connected documents. Public details (affected product/version, root cause, exploit info, and fixes) are not disclosed here; monitor official bulletins for updates.

CVE-2018-1018

Technical details for CVE-2018-1018 are not publicly available in the provided documents. Monitor for updates from Microsoft MSRC and related sources to obtain affected products, vectors, and fixes.

CVE-2018-8267

CVE-2018-8267 is described as a remote code execution in the Internet Explorer scripting engine memory handling, affecting IE9/IE10/IE11. Connected documents also reference a broader ChakraCore scripting engine memory corruption vulnerability (GHSA-W4QX-VW2W-Q566) and CNVD/CVE entries (CVE-2018-8...

CVE-2003-0701

CVE-2003-0701 describes a buffer overflow in Internet Explorer 6 SP1 for languages using double-byte encodings (e.g., Japanese) that can allow remote code execution via the Type property of an OBJECT tag. The root cause is a vulnerability in how IE handles the OBJECT element’s Type attribute, ena...

CVE-2010-0488

CVE-2010-0488 relates to an information-disclosure vulnerability in Microsoft Internet Explorer (versions 5.01 SP4, 6, 6 SP1, 7) caused by improper handling of certain encoding strings. The root cause is an issue in how IE processes content with specific encoding strings, allowing a crafted web p...

CVE-2011-1996

Microsoft Internet Explorer 6–8 is affected by CVE-2011-1996 (Option Element Use-After-Free), a memory corruption vulnerability triggered when IE accesses objects that have been deleted. Remote code execution could be achieved by convincing a user to view a crafted webpage. The issue is documente...

CVE-2014-0307

CVE-2014-0307 is a use-after-free vulnerability in Microsoft Internet Explorer 9—triggered by a sequence of manipulations of a TextRange object, enabling remote code execution or memory corruption. The connected sources confirm this is tied to the MS14-012 bulletin and specifically affect Interne...

CVE-2014-4050

CVE-2014-4050 (and related IE memory corruption CVEs) affects Microsoft Internet Explorer 10 and 11, where a crafted web site can trigger memory corruption leading to remote code execution or a denial of service. The vulnerability is described as the Internet Explorer Memory Corruption Vulnerabil...

CVE-2015-1668

CVE-2015-1668 affects Microsoft Internet Explorer 10 and 11. The vulnerability is a memory corruption issue triggered by processing a crafted web page, allowing remote code execution or a denial of service. The issue is addressed by the MS15-032 update (KB 3038314); affected environments should i...

CVE-2015-2541

CVE-2015-2541 affects Microsoft Internet Explorer 9–11. Description: a memory corruption vulnerability exploitable via a crafted web site, leading to remote code execution or denial of service. It is part of the broader “Memory corruption vulnerability” family and is distinguished from CVE-2015-2...

CVE-2015-2542

Mode C: CVE-2015-2542 affects Microsoft Edge and Internet Explorer 10/11. The vulnerability is described as memory corruption triggered by a crafted web site, enabling remote code execution or a denial of service. Connected records identify affected products as Microsoft Edge/IE, with root cause ...

CVE-2015-6059

The CVE-2015-6059 entry corresponds to an information-disclosure vulnerability in Microsoft’s VBScript 5.7/5.8 and JScript 5.7/5.8 engines used by Internet Explorer 8–11 and other products. A remote attacker could obtain sensitive information from process memory via a crafted web site (Scripting ...

CVE-2016-1101

CVE-2016-1101 is a Flash Player vulnerability (heap buffer overflow) affecting Adobe Flash Player up to 21.0.0.x and the Flash libraries in IE/Edge. Public advisories and vendor notes describe a heap-buffer-overflow/ memory-corruption issue in Flash parsing, enabling remote code execution as part...

CVE-2018-8447

CVE-2018-8447 is a remote code execution vulnerability in Internet Explorer (affecting IE 9, 10, 11) stemming from improper memory object handling. The CVE entry notes memory access mistakes as the root cause and lists high-severity impact per NVD metrics (network, user interaction required, high...

CVE-2009-0341

CVE-2009-0341 concerns Microsoft Internet Explorer 7.0 on Windows XP SP3, where the shell32 module may be vulnerable to an input element with an excessively long VALUE attribute. The NVD description indicates a possible remote code execution through this long VALUE attribute, potentially tied to ...

CVE-2013-0026

CVE-2013-0026 concerns a use-after-free vulnerability in Microsoft Internet Explorer 9, specifically in the InsertElement memory access path, which can allow remote code execution when a user visits a crafted web site. Technical details in connected documents confirm IE9 as affected and identify ...

CVE-2014-0306

CVE-2014-0306 is described as a memory corruption vulnerability in Microsoft Internet Explorer 8 and 9 (remote code execution via a crafted web page). Connected sources add that this class of IE memory corruption issues is addressed by Microsoft MS14-012 (Cumulative Security Update for Internet E...

CVE-2014-2810

Technical details for CVE-2014-2810 are not publicly provided in the connected documents. The IE memory corruption vulnerability is described, but no vendor/version/patch specifics are present here; monitor for updates.

CVE-2015-2412

CVE-2015-2412 affects Microsoft Internet Explorer 10 and 11, enabling a remote attacker to read arbitrary local files via a crafted pathname. The vulnerability stems from improper handling/validation of file paths, leading to information disclosure. Public references in the connected documents id...

CVE-2015-2413

CVE-2015-2413 affects Microsoft Internet Explorer 6–11. A remote attacker can determine the existence of local files via a crafted module-resource request, an information-disclosure vulnerability arising from how IE handles certain module-resource requests. The public description confirms IE info...

CVE-2016-0041

CVE-2016-0041 is a Windows DLL loading vulnerability affecting multiple Windows releases (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, Server 2012, RT 8.1, 10, IE 10–11). The issue is described as mishandling DLL loading, enabling local privilege escalation via a crafted application. Connected advi...

CVE-2016-1103

CVE-2016-1103 is a Flash Player vulnerability described as a buffer overflow in the Flash components (Flash Player/Flash plugin) that could lead to code execution. Multiple advisories (APSB16-15) and vendor notes tie it to parsing of crafted SWF content, with public exploits available. Affected p...

CVE-2017-8519

This CVE is an IE memory corruption vulnerability (CVE-2017-8519) affecting Windows 7 SP1, Server 2008/R2 SP1, 8.1/RT 8.1, 2012/2012 R2. It allows arbitrary code execution in the current user context when Internet Explorer improperly accesses objects in memory. The issue is addressed by June 2017...

CVE-2018-0929

CVE-2018-0929: Internet Explorer information disclosure vulnerability in multiple Windows versions related to memory handling. Connected Microsoft KB updates (Mar 2018 rollups) include IE security fixes and mitigations; exploits status not specified in provided docs. Affected software/versions ar...

CVE-2018-1020

The CVE-2018-1020 entry describes a remote code execution vulnerability in Internet Explorer caused by improper access to memory in certain objects, affecting IE 9, 10 and 11. The description indicates memory-corruption as the root cause and that exploitation would require user interaction, with ...

CVE-2019-0654

Technical details about CVE-2019-0654 are not publicly available in the provided documents. Monitor for updates from official advisories for affected products, impact, and fixes.

CVE-2005-0053

Summary of CAN-2005-0053 (CVE-2005-0053) : In Internet Explorer 5.01, 5.5, and 6, drag-and-drop events can be exploited to write arbitrary files or execute code on the local system via malicious drag-and-drop content. Microsoft’s fix is delivered in two security updates: MS05-014 (CVE CAN-2005-00...

CVE-2013-1450

Affected software: Microsoft Internet Explorer 8 and 9. Issue: When the Proxy Settings have the same address/port in HTTP and Secure rows, IE does not properly reuse TCP sessions to the proxy, allowing a remote attacker to obtain sensitive information (e.g., a Cookie header) via a crafted HTML do...

CVE-2014-1781

The CVE-2014-1781 entry concerns Microsoft Internet Explorer 8 and describes memory corruption triggered by a crafted web site, i.e., the “Internet Explorer Memory Corruption Vulnerability.” It is stated to be a different vulnerability from CVE-2014-1792, CVE-2014-1804, and CVE-2014-2770. The con...

CVE-2014-2811

CVE-2014-2811 and related CVEs describe a memory corruption vulnerability in Microsoft Internet Explorer (IE) affecting IE versions 6–11, including IE 11.根本原因 involves memory corruption triggered by processing crafted web content, allowing remote code execution or denial of service as described i...

CVE-2015-1744

Microsoft Internet Explorer 6–11 is affected by CVE-2015-1744, a memory-corruption vulnerability exploitable via a crafted web site that can allow remote code execution or a denial of service. The issue targets IE versions 6 through 11 and is described as a distinct vulnerability from CVE-2015-17...

CVE-2015-2492

CVE-2015-2492 affects Microsoft Internet Explorer 7–11. A crafted web site can cause memory corruption, allowing remote code execution or a denial of service. This is addressed by Microsoft Security Bulletin MS15-094; apply the patch to mitigate. Note: details confirm the vulnerability class as m...

CVE-2015-6142

CVE-2015-6142 concerns memory corruption in Microsoft Internet Explorer 11 and Microsoft Edge triggered by visiting a crafted web site, classified as a high-severity remote code execution/DoS risk. The vulnerability is referenced alongside other IE/Edge memory-corruption CVEs and is addressed by ...

CVE-2016-0166

CVE-2016-0166 affects Internet Explorer 11 on Windows; memory corruption can enable remote code execution or memory DOS via a crafted page. Root cause: improper handling of memory objects in IE. Impact: remote code execution in the context of the current user; requires user interaction. Remediati...