CVE-2010-0494

CVE-2010-0494 is the HTML Element Cross-Domain Vulnerability in Internet Explorer (IE6/6 SP1/7/8) that allows information disclosure when a user drags one IE window across another. The issue affects IE’s handling of cross-domain scripting context and is addressed by Microsoft Security Bulletin MS...

CVE-2014-0271

The CVE-2014-0271 entry maps to a memory-corruption vulnerability in the VBScript engine used by Microsoft Internet Explorer (IE) 6–11 and VBScript 5.6–5.8. The root cause is memory handling flaws in VBScript that can be triggered by a crafted web site, enabling remote code execution or memory co...

CVE-2014-0311

CVE-2014-0311 affects Microsoft Internet Explorer 6–11 and relates to a memory corruption vulnerability triggered by visiting a crafted web site. The provided documents identify the affected software (IE 6–11) and the general impact (remote code execution or memory corruption leading to possible ...

CVE-2014-2795

Microsoft Internet Explorer 8–11 contains memory corruption vulnerabilities (e.g., CVE-2014-2795) that can be triggered by a crafted web site, enabling remote code execution or memory corruption/DoS. Affected products: IE 6–11. Public exploits exist for this family of flaws. Remediation: apply th...

CVE-2014-4110

CVE-2014-4110 corresponds to a family of Internet Explorer memory corruption vulnerabilities (IE 6–11). Connected ZDI advisories (e.g., ZDI-14-306, -308, -317, -315, -312, -316, -318, etc.) describe use-after-free conditions in IE objects (such as CAttrArray, CFieldSetLayout, CTableCell, CDataBin...

CVE-2014-4134

Microsoft Internet Explorer Memory Corruption (CVE-2014-4134) affects IE 6–8 per the CVE description and related OpenVAS/NVD entries. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, due to a memory corruption flaw. Public ex...

CVE-2015-0052

CVE-2015-0052 is a memory‑corruption vulnerability in Microsoft Internet Explorer 10/11 that allows remote code execution via a crafted website. The connected Nessus plugin (MS15-009) indicates affected IE installations require security update 3034682 (MS15-009) to be fully protected, and notes t...

CVE-2015-1742

CVE-2015-1742 refers to a memory corruption vulnerability in Microsoft Internet Explorer 11. The issue allows remote attackers to execute arbitrary code or cause a denial of service by visiting a crafted web site. It is described as the same family as other IE11 memory corruption vulnerabilities ...

CVE-2015-2390

CVE-2015-2390 refers to a memory corruption vulnerability in Microsoft Internet Explorer (IE) versions 6–11 that can be triggered by visiting a crafted web page, enabling remote code execution or a memory corruption-induced denial of service. The connected advisories and scanners confirm the issu...

CVE-2015-2422

CVE-2015-2422 concerns a memory corruption vulnerability in Microsoft Internet Explorer (IE) versions 6–11. The issue allows remote code execution or a denial of service when a user visits a crafted webpage, due to how IE handles an in-memory object after it has been freed. The connected advisory...

CVE-2015-2452

CVE-2015-2452 affects Microsoft Internet Explorer (IE7–IE11). It enables remote code execution or memory corruption via a crafted web site, due to a memory corruption flaw in IE. The issue has been associated with Microsoft security bulletins MS15-079 (IE) and MS15-091 (Edge), indicating availabl...

CVE-2015-6152

CVE-2015-6152 is a vulnerability in Microsoft Internet Explorer (IE) tied to a Use-After-Free in MSHTML (document object handling) that was addressed as part of MS15-124. The connected Exploit-DB entry for IE11 details the MSHTML!CObjectElement Use-After-Free vulnerability and confirms IE11 as af...

CVE-2016-3240

The CVE-2016-3240 issue affects Microsoft Internet Explorer 9–11, described as a memory corruption vulnerability triggered by a crafted web site that can lead to remote code execution or a denial of service. The connected documents confirm IE 9–11 as the affected product and the memory corruption...

CVE-2016-3324

CVE-2016-3324 is a memory-corruption vulnerability in Microsoft Internet Explorer 9–11 that allows remote code execution when a user visits a crafted page. The CIRCL/CVE registry notes an exploitation path with Exploit DB (exploits/40748), indicating in-the-wild or publicly known exploitation for...

CVE-2018-0991

CVE-2018-0991 is a remote code execution vulnerability where Internet Explorer improperly accesses objects in memory (Internet Explorer Memory Corruption Vulnerability). Affected: Internet Explorer 11 and 10. Root cause (per description): improper memory object handling could allow code execution...

CVE-2018-8249

CVE-2018-8249 concerns Microsoft Internet Explorer Memory Corruption Vulnerability affecting Internet Explorer 11. The issue is a remote code execution flaw triggered when Internet Explorer improperly accesses objects in memory. The CVSS data credits a NETWORK attack vector, HIGH impact on confid...

CVE-2019-0762

Technical details for CVE-2019-0762 are not publicly available in the provided documents. They describe a security feature bypass in Microsoft browsers without specifics on affected products, versions, or mitigations. Monitor for updates.

CVE-2000-0982

Consolidated details: The CVE affects Internet Explorer prior to version 5.5, where cached credentials for a secure site could be forwarded to insecure pages on the same site. This exposure could let remote attackers obtain credentials by monitoring connections to the web server. Root cause is th...

CVE-2004-0526

Unknown versions of Internet Explorer and Outlook are affected by a phishing-related vulnerability that allows remote attackers to spoof a legitimate URL in the status bar. The issue arises from crafting A HREF tags with modified alt values pointing to the legitimate site, combined with an image ...

CVE-2007-4041

CVE-2007-4041 describes multiple argument injection vulnerabilities in Mozilla Firefox 2.0.0.5 and Firefox 3.0alpha that allow remote attackers to execute arbitrary commands via a NULL byte (%00) and shell metacharacters in certain URI handlers (mailto, nntp, news, snews, telnet). The issue is a ...

CVE-2007-5277

CVE-2007-5277 concerns Microsoft Internet Explorer 6 on Windows XP where DNS pins can be dropped after failed connections to irrelevant TCP ports, making DNS rebinding attacks more feasible. The provided description demonstrates a scenario using a port 81 URL in an IMG SRC, where the DNS pin was ...

CVE-2010-0246

This CVE (CVE-2010-0246) concerns Microsoft Internet Explorer 8 memory handling where uninitialized or deleted objects can cause memory corruption, enabling remote code execution. The connected MS KB (MS10-002) discusses a cumulative IE security update addressing remote-code-execution vulnerabili...

CVE-2010-1489

CVE-2010-1489 is an IE8 XSS Filter issue caused by inadequate neutering of the SCRIPT tag, enabling remote XSS on sites with no inherent vulnerabilities. Microsoft’s KB978207 (MS10-002) describes the fix as a cumulative security update for Internet Explorer that resolves remote code execution vul...

CVE-2010-3340

CVE-2010-3340 is an HTML Object Memory Corruption vulnerability in Microsoft Internet Explorer (IE6/IE7) that could allow remote code execution when a user views a specially crafted page. The issue arises from IE’s handling of memory objects that are uninitialized or have been deleted, enabling a...

CVE-2014-0298

The CVE-2014-0298 entry relates to memory corruption in Microsoft Internet Explorer (IE) 9–11 triggered by visiting a crafted website, per the NVD/NVD-derived description. Connected sources corroborate that this is a set of IE memory-corruption vulnerabilities resolved by Microsoft Security Bulle...

CVE-2014-1752

Microsoft Internet Explorer 6–11 contains multiple memory-corruption vulnerabilities (CVE-2014-1752) exploitable via specially crafted web content. CORE details: affected product is Internet Explorer; root cause is memory corruption leading to remote code execution or DoS; update MS14-018 (KBs, e...

CVE-2014-2819

CVE-2014-2819 affects Microsoft Internet Explorer 7–11. The vulnerability is an elevation-of-privilege flaw that allows remote attackers to gain privileges by convincing a user to visit a crafted web page, enabling code execution with the user’s rights. Public exploits exist; several advisories r...

CVE-2014-4052

CVE-2014-4052 affects Microsoft Internet Explorer 9 and 10. The connected sources describe a memory-corruption vulnerability exploitable via a crafted web site, enabling remote code execution or a denial of service. Open-source advisories (e.g., ZDI-14-280) specify a use-after-free in handling of...

CVE-2014-4065

Microsoft Internet Explorer (versions 6–11) contains a memory corruption vulnerability exploitable via a crafted web page, leading to remote code execution. ZDI advisories describe use-after-free flaws in various IE components (e.g., CAttrArray, CFieldSetLayout, CTableCell, CMarkup, etc.) that at...

CVE-2014-6329

CVE-2014-6329 : Affects Microsoft Internet Explorer 11. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) by visiting a crafted web site. The description corresponds to a memory corruption issue, and the CVE is noted as distinct f...

CVE-2015-1752

CVE-2015-1752 affects Microsoft Internet Explorer (IE) 9–11. The vulnerability is described as memory corruption triggered by a crafted web site, enabling remote code execution or denial of service through a crafted page. It is a network-exposed issue with no user interaction required per the CVS...

CVE-2015-2408

CVE-2015-2408 affects Microsoft Internet Explorer 9–11. This memory corruption vulnerability can be triggered by visiting a crafted website, enabling remote code execution or a denial of service. Connected sources corroborate IE memory corruption, with related CVEs and a shared family of vulnerab...

CVE-2015-2498

CVE-2015-2498 affects Microsoft Internet Explorer 7–11, where memory corruption can be triggered by a crafted web site, allowing remote code execution or a denial of service. The vulnerability is part of a family with other CVEs (e.g., 2486/2487/2490/2492/2494/2499). The provided documents indica...

CVE-2015-2499

CVE-2015-2499 affects Microsoft Internet Explorer 7–11, allowing remote code execution or memory corruption via a crafted web site. The issue is part of a family of memory-corruption memory bugs (distinct from other CVEs in 2015-2490/2492/2494/2498/2486/2487). The NVD entry cites a CVSSv2 base sc...

CVE-2016-0061

CVE-2016-0061 affects Microsoft Internet Explorer 9–11 and Microsoft Edge, where a crafted website can trigger memory corruption, enabling remote code execution or a denial of service. Root cause is memory corruption in the browser’s handling of web content. Public references point to Microsoft s...

CVE-2016-3277

CVE-2016-3277 affects Microsoft Internet Explorer 10/11 and Microsoft Edge. The issue is an information-disclosure vulnerability caused by improper handling of objects in memory, allowing remote attackers to obtain sensitive information via a crafted website. Mitigations are provided by Microsoft...

CVE-2016-3331

CVE-2016-3331 affects Microsoft Internet Explorer 11 and Microsoft Edge with a memory corruption vulnerability that allows remote code execution or memory corruption via a crafted website. Root cause: improper handling of objects in memory in Microsoft browsers. Impact per sources: remote code ex...

CVE-2016-4114

Technical details for CVE-2016-4114 are not provided in the supplied documents; the initial description is unspecified and no connected documents supply concrete details. Monitor for updates.

CVE-2018-8460

Technical details for CVE-2018-8460 are not publicly available in the provided documents; monitor for updates.

CVE-1999-0827

The CVE affects Internet Explorer 5.0 (and other versions) where the default setting for the option “Navigate sub-frames across different domains” is enabled, enabling frame spoofing. Root cause: the feature is on by default, allowing sub-frame navigation across domains and exposing partial confi...

CVE-2003-1048

CVE-2003-1048 describes a double-free vulnerability in Internet Explorer’s GIF handling via mshtml.dll. The flaw affects IE6 and related builds where processing GIFs could allow a remote attacker to crash the application or, in some scenarios, execute arbitrary code. Public advisories (MS04-025) ...

CVE-2004-0549

The CVE-2004-0549 vulnerability is a cross-domain navigation/redirect issue in the Internet Explorer rendering stack (WebBrowser ActiveX or MSHTML) used by IE6 and other IE-enabled components. A remote attacker could abuse navigation via delayed HTTP redirects (or manipulated Location headers) an...

CVE-2004-1376

CVE-2004-1376 describes a directory traversal vulnerability in Microsoft Internet Explorer (versions 5.01, 5.5, and 6.0) where remote FTP servers can cause the client to overwrite arbitrary files by using .. sequences in filenames returned from an FTP LIST. The connected material confirms the fla...

CVE-2010-1118

Technical details for CVE-2010-1118 are not publicly available in the provided connected documents. The Initial Description notes an unspecified vulnerability in IE8 on Windows 7. Monitor for updates for any concrete impact, affected products, or fixes.

CVE-2010-3325

CVE-2010-3325 affects Microsoft Internet Explorer 6–8. It is an information-disclosure vulnerability in how IE processes CSS special characters, enabling a crafted web page to disclose content from another domain/IE zone. Attack would require the user to view a malicious page; impact is informati...

CVE-2010-3886

The CVE-2010-3886 issue affects Microsoft Internet Explorer (mshtml.dll), specifically the CTimeoutEventList::InsertIntoTimeoutList function. The vulnerability arises from using a pointer value as part of Timer ID generation for setTimeout/setInterval in VBScript and JScript, enabling information...

CVE-2013-0094

Microsoft Internet Explorer 6–10 are affected by a use-after-free in removeChild that allows remote code execution via a crafted web page. The root cause is memory access to a deleted object, enabling an attacker to run arbitrary code with the caller’s privileges. The CVE is CVE-2013-0094; Micros...

CVE-2013-3184

CVE-2013-3184 affects Microsoft Internet Explorer 7–10 via a crafted web site that triggers a memory corruption vulnerability. Connected sources describe a Use-After-Free in mshtml related to CFlatMarkupPointer and EnsureRecalcNotify, with exploitation potentially leading to remote code execution...

CVE-2014-4055

Microsoft Internet Explorer 10/11 memory corruption vulnerability (CVE-2014-4055) can enable remote code execution or DoS when visiting a crafted site. Affected: IE 10–11. Root cause: memory corruption in IE’s handling of web content. Public exploits exist (SecurityVulns doc), and related advisor...

CVE-2014-4100

CVE-2014-4100 applies to Microsoft Internet Explorer (IE) 6–11 and describes a remote code execution/memory corruption via a crafted web site. The connected ZDI advisories from 2014 detail multiple IE use-after-free vulnerabilities (e.g., CAttrArray, CFieldSetLayout, CTableCell, CTable, CDataBind...