CVE-2018-8460

Technical details for CVE-2018-8460 are not publicly available in the provided documents; monitor for updates.

CVE-2001-1325

CVE-2001-1325 affects Internet Explorer 5.0/5.5 and Outlook Express 5.0/5.5. The vulnerability allows remote script execution when Active Scripting is disabled if scripts are embedded in XML stylesheets (XSL) loaded via an IFRAME, potentially tied to Windows Scripting Host (WSH). OpenVAS findings...

CVE-2003-1326

Microsoft Internet Explorer 5.5 and 6.0 are affected by CVE-2003-1326, which enables remote attackers to bypass cross-domain security and execute script or arbitrary code via dialog boxes. The issue centers on improper handling of dialog frames and the dialogArguments mechanism, enabling cross-do...

CVE-2004-1331

Microsoft Internet Explorer 6.0 SP2 contains a vulnerability in the execCommand API where a SaveAs operation can bypass the File Download - Security Warning dialog, allowing remote attackers to save arbitrary files with arbitrary extensions on the target system. The CPAI advisory describes exploi...

CVE-2007-2222

CVE-2007-2222 pertains to memory corruption in Microsoft Speech API (ActiveListen/ActiveVoice) ActiveX controls Xlisten.dll and Xvoice.dll used by Internet Explorer 5.01–7. The root cause is memory corruption from uninitialized/deleted objects and related prototype-variable/table-cell handling, a...

CVE-2010-3330

Markdown summary of CVE-2010-3330: The affected product is Microsoft Internet Explorer (IE) versions 6–8. The vulnerability is an information-disclosure flaw where IE improperly allows scripts to access content from a different domain or IE zone, enabling cross-domain information disclosure via a...

CVE-2011-0094

CVE-2011-0094 is a use-after-free vulnerability in Microsoft Internet Explorer 6 and 7 tied to the MSHTML layouts engine. The flaw arises when an object is accessed after it has been freed (specifically in CSpliceTreeEngine::InsertSplice), allowing remote code execution via a crafted webpage. Pub...

CVE-2011-1257

Microsoft Internet Explorer 6–8 are affected by a race condition in window.open, which can allow remote code execution or memory corruption when a user visits a malicious page. The vulnerability is addressed by MS11-057 (Cumulative Security Update for Internet Explorer, Aug 9, 2011). OpenVAS entr...

CVE-2011-1999

Microsoft Internet Explorer 8 is affected by CVE-2011-1999 (Select Element Remote Code Execution). A memory handling flaw in how Select/Option elements are validated allows remote code execution when a user visits a crafted webpage. The vulnerability is addressed by MS11-081 (MS patch 2586448); a...

CVE-2013-0090

CVE-2013-0090 is a Use-After-Free vulnerability in Microsoft Internet Explorer versions 6–10 that can allow remote code execution via a crafted webpage triggering access to a deleted object (IE CCaret Use After Free). Technical details in connected sources confirm affected software (IE6–IE10) and...

CVE-2014-0270

Microsoft Internet Explorer 9–11 is affected by CVE-2014-0270 and related memory-corruption vulnerabilities. The connected Kaspersky entry notes multiple IE vulnerabilities exploitable via a crafted web site, with remote code execution/privilege escalation possible. Affected products: IE 9–11. Ro...

CVE-2014-0308

Technical details for CVE-2014-0308 are not publicly provided in the connected documents. Monitor for updates. Available sources mention memory corruption in Internet Explorer but do not specify affected versions, vectors, or fixes for this CVE.

CVE-2014-1785

CVE-2014-1785 concerns Microsoft Internet Explorer 11. The documented impact is remote code execution or denial of service due to memory corruption triggered by a crafted web site. The vulnerability is described as a distinct issue from CVE-2014-1769 and related CVEs, affecting IE11 components (M...

CVE-2014-1796

CVE-2014-1796 refers to a remote memory-corruption vulnerability in Microsoft Internet Explorer (IE 6–11). The description across sources states successful exploitation could allow remote code execution or memory corruption (DoS) when a user visits a crafted page. The vulnerability is associated ...

CVE-2014-2820

CVE-2014-2820 (Microsoft Internet Explorer Memory Corruption Vulnerability) affects IE 6–11. The issue allows remote attackers to trigger memory corruption via a crafted web site, enabling remote code execution or a denial of service. Public exploits exist per OpenVAS/related sources, indicating ...

CVE-2014-4067

Affected product: Microsoft Internet Explorer 10 and 11. Vulnerability: memory corruption leading to remote code execution or DoS when visiting a crafted site (multiple variants). Root cause / details: not fully disclosed in the provided materials beyond “memory corruption via crafted web site.” ...

CVE-2014-4087

CVE-2014-4087 maps to a Microsoft Internet Explorer 11 memory corruption/remote code execution vulnerability. Connected advisories (ZDI-14-309, 14-322, 14-319, 14-307) describe related IE flaws involving uninitialized or dangling pointers within IE components such as CAttrValue, Tree::SComputedSt...

CVE-2015-0037

CVE-2015-0040 (Internet Explorer) is a memory-corruption remote-code-execution vulnerability affecting Internet Explorer 11. The CVE family around 2015-0018/0037/0066 describes IE memory corruption via a crafted web page, with related exploit activity (e.g., exploit-db reference for CVE-2015-0040...

CVE-2015-0067

CVE-2015-0067 = memory corruption in Internet Explorer (IE) versions 6–11 that could allow remote code execution when a user visits a crafted webpage. Exploitable via a crafted site; impact includes arbitrary code execution and denial of service as noted in MS15-009. Mitigation requires applying ...

CVE-2015-1686

CVE-2015-1686 documents an ASLR bypass in Microsoft Internet Explorer's scripting engines: VBScript 5.6–5.8 and JScript 5.6–5.8 used in IE8–IE11 (and related products). The root cause is ASLR bypass capability within these engines when rendering a crafted web page, enabling potential arbitrary co...

CVE-2015-1688

CVE-2015-1688 affects Microsoft Internet Explorer (IE) versions 7–11. The vulnerability is an elevation-of-privilege flaw triggered by visiting a crafted web page, enabling a remote attacker to gain higher privileges on the vulnerable system. Connected sources consistently reference IE as the aff...

CVE-2015-1689

CVE-2015-1689 affects Microsoft Internet Explorer 9–11. The connected sources describe a memory corruption vulnerability triggered by visiting a crafted web page, enabling remote code execution or a denial of service. The vulnerability is part of a family with CVE-2015-1705 and is explicitly iden...

CVE-2015-1705

CVE-2015-1705 affects Microsoft Internet Explorer 9–11. The vulnerability is a memory corruption issue exploitable via a crafted web site, allowing remote code execution or a denial of service. The entry distinguishes it from CVE-2015-1689 and, per the provided references, is addressed by Microso...

CVE-2015-1767

CVE-2015-1767 covers memory corruption in Microsoft Internet Explorer 9–11 triggered by a crafted web site, enabling remote code execution or a denial of service. Connected sources corroborate that IE versions 9–11 are affected by memory corruption vulnerabilities, with multiple related CVEs (e.g...

CVE-2015-2501

CVE-2015-2501 affects Microsoft Internet Explorer (IE) 9 (and IE7–IE11 per listed sources). The vulnerability is a remote memory-corruption flaw triggered by visiting a crafted web page, allowing remote code execution or, per some sources, denial of service. The primary concrete technical detail ...

CVE-2015-6140

The CVE-2015-6140 entry concerns Microsoft Internet Explorer 11 and Microsoft Edge. A memory corruption vulnerability can be triggered by a crafted web site, allowing remote code execution or memory corruption that could lead to a denial of service. The linked OpenVAS note references a missing Mi...

CVE-2015-6153

CVE-2015-6153 is part of the Microsoft browser memory corruption family affecting Internet Explorer 11 and Microsoft Edge. The connected data describe memory corruption when processing crafted web content, enabling remote code execution or memory-related denial of service. The vulnerabilities are...

CVE-2016-0112

Technical details about CVE-2016-0112 are not publicly available in the provided documents; no affected products, root cause, or remediation are disclosed here. Monitor for updates.

CVE-2016-0159

CVE-2016-0159 is Internet Explorer Memory Corruption vulnerability (IE9) enabling remote code execution via crafted web pages. Affected product family includes Internet Explorer 9 on Windows Vista/Server 2008 and IE11 in later Windows versions per MSRC/MSKB/MS16-037. Root cause: memory corruption...

CVE-2016-3383

CVE-2016-3383 details: A remote code execution/memory corruption vulnerability in Microsoft Internet Explorer 10 and 11 that can be exploited by a crafted website to execute arbitrary code in the context of the current user. Root cause involves how IE handles objects in memory, enabling memory co...

CVE-2016-4113

Technical details for CVE-2016-4113 are not publicly available in the provided documents. Monitor for updates.

CVE-2018-0932

CVE-2018-0932 affects Internet Explorer components in Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1/RT 8.1, Windows Server 2012/R2, and Internet Explorer/Edge on Windows 10, including IE in later builds (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016. The vulnerability is an infor...

CVE-2018-8461

Technical details about CVE-2018-8461 are not publicly available in the provided connected documents. Monitor for updates from official advisories and CVE records.

CVE-2007-0217

The CVE-2007-0217 issue affects Microsoft Internet Explorer’s wininet.dll FTP client parsing of FTP server responses. A null-termination error when handling FTP replies can overwrite heap memory, enabling remote code execution. Public sources (MS07-016, CPAI-2007-030) confirm IE/WinINet memory-co...

CVE-2007-5344

CVE-2007-5344 affects Microsoft Internet Explorer 5.01–7 via mshtml.dll, where the CRecalcProperty/setExpression sequence enables remote arbitrary code execution through heap corruption of uninitialized/removed objects. Public sources in connected docs confirm a memory-corruption chain tied to se...

CVE-2008-2947

CVE-2008-2947 describes a cross-domain vulnerability in Internet Explorer (IE 5.01 SP4 on Windows 2000 SP4, IE6 SP1 on Windows 2000/XP, IE6/IE7 on various Windows editions, and IE7) where JavaScript can abuse the Window Location object due to incorrect origin determination, leading to remote code...

CVE-2009-2531

CVE-2009-2531 corresponds to an Uninitialized Memory Corruption vulnerability in Microsoft Internet Explorer (IE 6, 6 SP1, 7, and 8). The connected MSKB MS09-054 describes a cumulative security update that mitigates remote code execution by requiring users visit a malicious page; applying the MS0...

CVE-2010-1489

CVE-2010-1489 is an IE8 XSS Filter issue caused by inadequate neutering of the SCRIPT tag, enabling remote XSS on sites with no inherent vulnerabilities. Microsoft’s KB978207 (MS10-002) describes the fix as a cumulative security update for Internet Explorer that resolves remote code execution vul...

CVE-2010-2556

CVE-2010-2556 affects Microsoft Internet Explorer 6–8. The flaw arises when the browser handles in-memory objects that are uninitialized or have been deleted, causing memory corruption and enabling remote code execution. The connected documents corroborate this vulnerability as an uninitialized-m...

CVE-2012-1545

CVE-2012-1545 affects Microsoft Internet Explorer versions 6–9 and 10 Consumer Preview. The issue allows remote attackers to bypass Protected Mode or trigger memory corruption causing a denial of service by leveraging access to a Low integrity process, as demonstrated by VUPEN during Pwn2Own at C...

CVE-2014-0283

CVE-2014-0283 affects Microsoft Internet Explorer 9. The vulnerability is a memory-corruption issue in IE that could allow remote code execution via a crafted web site. A patch exists: MS14-010 (Cumulative Security Update for Internet Explorer, 2909921) addresses this vulnerability. Exploitation ...

CVE-2014-0299

CVE-2014-0311 affects Microsoft Internet Explorer 6–11. The vulnerability is described as a memory corruption issue triggered by a crafted web site and is associated with other IE memory corruption CVEs from 2014. Consequences cited in the provided records include remote code execution or a denia...

CVE-2014-1802

CVE-2014-1802 affects Microsoft Internet Explorer 10 and 11. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site (the entry notes it as a memory‑corruption vulnerability). The vulnerability is identified as a distinct issue ...

CVE-2014-2789

Affected product: Microsoft Internet Explorer 8–11. Vulnerability: memory corruption via a crafted web site, enabling remote code execution or memory corruption. Connected docs confirm IE multiple vulnerabilities and public exploits exist for this family. This CVE-2014-2789 is a distinct memory‑c...

CVE-2014-2818

Microsoft Internet Explorer 10 is affected by CVE-2014-2818, a remote memory-corruption vulnerability in the handling of crafted web content. The root cause is a use-after-free in the CScriptData object handling within IE, enabling remote code execution when a user visits a malicious page. Public...

CVE-2014-4059

CVE-2014-4059 refers to a remote code execution/memory corruption vulnerability in Microsoft Internet Explorer (versions 6–11). Connected advisories (ZDI-14-306, -14-308, -14-317, -14-315, -14-312, -14-316, -14-318, -14-314, -14-313) describe use-after-free flaws in various IE components (e.g., C...

CVE-2014-6341

CVE-2014-6341 affects Microsoft Internet Explorer 6–11. It describes remote code execution or memory corruption via a crafted web site (memory corruption vulnerability). Other sources reference a cluster of IE vulnerabilities from MS14-065 era; this CVE is noted as a different issue from CVE-2014...

CVE-2014-6366

CVE-2014-6366 is an Internet Explorer memory-corruption vulnerability affecting IE 6 and 7 (and broader IE versions per related advisories) that allows remote code execution via a crafted webpage, potentially causing memory corruption and DoS. Public exploits exist for this vulnerability; the iss...

CVE-2015-0031

CVE-2015-0031 affects Microsoft Internet Explorer 6–11 via a crafted web page that triggers memory corruption and remote code execution. The vulnerability is part of the IE memory‑corruption family and is addressed by MS15-009 (security update for Internet Explorer). Per the Nessus plugin, IE 9–1...

CVE-2015-0049

CVE-2015-0049 affects Microsoft Internet Explorer 8 and 10 with memory corruption allowing remote code execution via a crafted webpage. The connected Nessus/KB data confirms multiple IE memory‑corruption vulnerabilities, and MS15‑009 (KB 3034682) is the bundled security update addressing IE, with...