CVE-2015-1624

CVE-2015-1624 affects Microsoft Internet Explorer 8–11, describing a memory-corruption vulnerability that enables remote code execution via a crafted webpage. The underlying issue is memory handling in IE leading to arbitrary code execution or DoS when a user visits a malicious site. This CVE is ...

CVE-2015-1685

CVE-2015-1685 , documented for Microsoft Internet Explorer 11, is an ASLR bypass vulnerability exploited via a specially crafted web page. The CVE is associated with the MS15-043 advisory and is part of multiple IE vulnerabilities addressed by cumulative security updates (e.g., KB 3049563). Affec...

CVE-2015-6045

The CVE-2015-6045 issue affects Microsoft Internet Explorer 11. It is a use-after-free in the CElement object when processing the CSS empty-cells property on a TABLE, leading to remote code execution or memory corruption. Public sources (ZDI-15-523) describe the vulnerability as exploitable when ...

CVE-2015-6077

Technical details for CVE-2015-6077 are not publicly provided in the connected documents. Monitor for updates.

CVE-2015-6184

Microsoft Internet Explorer 7–11 is affected by a memory corruption/type-confusion vulnerability in the CAttrArray object implementation that can be triggered by a malformed CSS token sequence and HTML element modifications, enabling remote code execution or denial of service. Connected sources (...

CVE-2016-0114

CVE-2016-0114 refers to a memory corruption vulnerability in Microsoft Internet Explorer 11 that allows remote code execution or memory corruption via a crafted web site. The connected data confirms related IE11/Edge memory corruption issues (CVE-2016-0102/0103/0106/0108/0109) and notes exploitat...

CVE-2016-3248

CVE-2016-3248 covers a memory corruption vulnerability in Microsoft scripting engines (JScript 9, VBScript, Chakra) used by IE 9–11 and Edge. Exploitation via a crafted web site could allow remote code execution or memory corruption leading to DoS. Affected components: JScript/VBScript/Chakra wit...

CVE-2016-3259

CVE-2016-3259 concerns memory corruption in Microsoft JScript 9, VBScript, and Chakra JavaScript engines used by Internet Explorer 9–11 and Edge, per the CVE entry and multiple related advisories. The connected documents corroborate a Chakra/JScript/VBScript memory corruption vulnerability that e...

CVE-2018-8470

CVE-2018-8470 is a security feature bypass in Internet Explorer 11 where the handling of scripts enables a UXSS condition. This aligns with NVD data (CVSS3 base 6.1, CVSS2 base 4.3). No exploit details are provided in the documents.

CVE-2001-0150

Affected software: Internet Explorer 5.5 and earlier running on Windows, when used with the Telnet client provided by Services for Unix (SFU) 2.0. Vulnerability: IE can invoke Telnet with unsafe command-line arguments supplied by a web page, enabling remote attackers to cause arbitrary command ex...

CVE-2003-0823

CVE-2003-0823 describes a drag-and-drop hijack in Internet Explorer 6 SP1 and earlier, where invoking window.moveBy could direct drag-and-drop actions to other windows, enabling remote control of user actions. The vulnerability is cited as a variant exploited by other browsers as well (e.g., CVE-...

CVE-2011-0035

The CVE-2011-0035 entry concerns Microsoft Internet Explorer 6–8 and a memory corruption vulnerability triggered by handling objects that are not properly initialized or have been deleted. The NVD description notes remote code execution via accessing such objects, i.e., an uninitialized memory co...

CVE-2011-2382

CVE-2011-2382 affects Microsoft Internet Explorer 8 and earlier, and IE9 beta, by failing to properly restrict cross-zone drag-and-drop actions. An attacker could entice a user to load a page containing an IFRAME with a file: URL to read cookies, effectively cookie hijacking. Vulnerable component...

CVE-2013-1451

CVE-2013-1451 affects Microsoft Internet Explorer 8 and 9. When the Proxy Settings use the same Proxy address and Port in the HTTP and Secure rows, IE may not keep the SSL lock icon consistent with the address bar, enabling spoofing of web sites via a crafted HTML document that triggers multiple ...

CVE-2014-0275

CVE-2014-0275 affects Microsoft Internet Explorer 6–11. The issue is a memory corruption vulnerability triggered by a crafted web site, enabling remote execution of arbitrary code or a denial of service. Public exploits exist for this vulnerability, and the IE family is widely impacted as indicat...

CVE-2014-1772

CVE-2014-1772 is linked to an Internet Explorer memory corruption issue affecting IE10/IE11 (Use After Free/root-cause analysis described by TrendLabs). The connected article details a POC/trigger path, noting a heap/page-heap setup (gflags) and Windbg attachment to the iexplore.exe process, illu...

CVE-2014-1778

CVE-2014-1778 affects Microsoft Internet Explorer 8–11 and, per the primary description, allows remote attackers to execute arbitrary web script with elevated privileges via unspecified vectors (a separate issue from CVE-2014-2777). Connected material confirms affected IE versions and cites MS14-...

CVE-2014-1797

CVE-2014-1797 affects Microsoft Internet Explorer 10 and 11 and relates to a memory corruption flaw exploitable via a crafted web site, enabling remote code execution or a denial of service. The referenced entries consistently describe an IE memory-corruption vulnerability and cite the same name ...

CVE-2014-4080

Affected software: Microsoft Internet Explorer 10 and 11. Vulnerability class: memory corruption leading to remote code execution or denial of service via a crafted web site. Root cause (per documents): memory corruption vulnerability in IE. Impact details provided: remote attackers may execute a...

CVE-2014-4097

Microsoft Internet Explorer 6–11 contains a memory corruption vulnerability (CVE-2014-4097) that enables remote code execution via a crafted web page. Connected advisories (ZDI entries) describe multiple IE use-after-free flaws (e.g., CAttrArray, CFieldSetLayout, CTableCell, CDataBindTask, CMarku...

CVE-2014-4104

The CVE-2014-4104 entry corresponds to multiple Internet Explorer UAF (Use-After-Free) vulnerabilities reported for IE 6–11, with several ZDI advisories (ZDI-14-306, -308, -317, -315, -312, -316, -318, -314, -313, etc.) describing memory corruption flaws in various IE object handlers (CAttrArray,...

CVE-2014-6373

CVE-2014-6373 is a remote memory-corruption vulnerability in Microsoft Internet Explorer 10 that allows arbitrary code execution via a crafted web site. Affected product: Internet Explorer 10. Root cause: memory corruption when processing certain web content. Impact per sources: remote code execu...

CVE-2015-0026

CVE-2015-0031 is a memory corruption vulnerability in Microsoft Internet Explorer 6–11 that can enable remote code execution when visiting a crafted web page. The underlying issue is a faulty memory handling path related to an object that is not properly initialized or has been deleted. Exploitat...

CVE-2015-1765

CVE-2015-1765 affects Microsoft Internet Explorer 9–11 . The vulnerability is an information-disclosure weakness that allows remote attackers to read a user’s browser history by persuading them to visit a crafted web site. Connected sources confirm IE versions 9–11 are affected and that the issue...

CVE-2015-2385

CVE-2015-2385 affects Microsoft Internet Explorer (IE) versions 6–11. A remote attacker can exploit a memory corruption flaw by enticing a user to load a crafted webpage, potentially allowing arbitrary code execution or a memory-related denial of service. The root cause involves accessing an obje...

CVE-2015-2410

CVE-2015-2410 corresponds to multiple Internet Explorer versions (IE 6–11) information-disclosure vulnerabilities. The core issue is that a crafted stylesheet can cause IE to reveal the existence of local files, enabling an attacker to infer local-file presence. The CVE entry notes an information...

CVE-2015-2411

Microsoft Internet Explorer 10 and 11 are affected by memory corruption vulnerabilities described under CVE-2015-2411 (and related CVEs). The publicly documented details indicate that a crafted website can trigger remote code execution or a denial of service via memory corruption in IE’s handling...

CVE-2015-2443

CVE-2015-2443 affects Microsoft Internet Explorer 10/11 (IE10-IE11) via a memory corruption flaw triggered by viewing a crafted webpage, leading to remote code execution or DoS. Public exploit activity is noted in linked advisories. The fix is MS15-079 (KB3082442), part of August 2015 cumulative ...

CVE-2015-2493

CVE-2015-2493 affects Microsoft Internet Explorer (IE) engines VBScript and JScript in IE 8 (and IE 7–11 per related advisories). The vulnerability is a memory corruption flaw that can be exploited by a crafted web page to cause remote code execution or, per some sources, memory corruption leadin...

CVE-2015-6050

CVE-2015-6050 is an Internet Explorer memory corruption vulnerability exploited via specially crafted web pages. A remote attacker could execute arbitrary code or cause a denial of service. Affected products span IE 7–11. The issue is addressed by the MS15-106 update; Microsoft released accompany...

CVE-2016-0063

CVE-2016-0063 is a Microsoft Internet Explorer memory corruption vulnerability affecting IE9–IE11 that can be triggered by visiting a crafted web site to allow remote code execution or memory corruption (per NVD description). Connected data show an in-the-wild exploit for this CVE (Exploit-DB ent...

CVE-2016-0160

CVE-2016-0160 affects Internet Explorer 11 when DLLs are loaded via MSHTML.DLL, enabling binary planting/dll hijacking leading to remote code execution. The PacketStorm open writeup specifies MSHTML.DLL loading DLLs not present on Windows 7 SP1 and notes the vulnerability is not necessarily prese...

CVE-2016-3391

CVE-2016-3391 affects Microsoft Internet Explorer 10/11 and Edge. The issue allows credential disclosure via access to a memory dump (context-dependent disclosure). Connected sources identify mitigations as local patches: IE memory-disclosure fixes delivered via MS16-118 (and related MS16-119) up...

CVE-2016-7283

CVE-2016-7283 affects Microsoft Internet Explorer 9–11. The vulnerability enables remote code execution or memory corruption via a crafted web site. Affected components include IE’s rendering stack (IEXPLORE/IE frame) and associated DLLs (e.g., Mshtml, Urlmon, Wininet, etc.) across IE9–IE11 on Wi...

CVE-2002-1186

CVE-2002-1186 affects Microsoft Internet Explorer versions 5.01 through 6.0. The vulnerability arises because IE does not properly perform security checks on certain encoded characters within a URL, enabling a remote attacker to steal potentially sensitive information by redirecting the user to a...

CVE-2006-0830

CVE-2006-0830 affects the Internet Explorer scripting engine. A web page triggering a recurrent infinite loop in Javascript or VBScript can consume stack space, potentially causing a denial of service and, per the description, may allow arbitrary code execution by resetting the loop’s location va...

CVE-2007-2718

CVE-2007-2718 describes a cross-site scripting (XSS) vulnerability in the WebMail component of Stalker CommuniGate Pro 5.1.8 and earlier when accessed via Microsoft Internet Explorer . The issue allows a remote attacker to inject arbitrary web script or HTML through crafted STYLE tags . The vulne...

CVE-2007-3027

CVE-2007-3027 is a remote code execution issue in Microsoft Internet Explorer (5.01, 6, 7) caused by a race condition during language pack installation, which can trigger memory corruption when a page forces installation of multiple language packs. The vulnerability could allow an attacker to run...

CVE-2007-4790

CVE-2007-4790 describes a remote code execution via a stack-based buffer overflow in two Visual FoxPro ActiveX controls (FPOLE.OCX 6.0.8450.0 and Foxtlib.ocx) used by the FoxPro FPole 1.0 type library, affecting Internet Explorer 5.01, 6 SP1/SP2, and 7. The flaw is triggered by a long first argum...

CVE-2008-3474

CVE-2008-3474 is an information-disclosure vulnerability in Microsoft Internet Explorer 6/7 . IE may fail to correctly determine the origin domain/zone of web scripts, enabling a crafted HTML page to disclose sensitive data across domains. This CVE is addressed within the MS08-058 Cumulative Secu...

CVE-2008-3477

CVE-2008-3477 affects Microsoft Excel 2000 SP3, 2002 SP3, and 2003 SP2/SP3, in which the VBA Performance Cache handling of embedded objects can be abused to execute arbitrary code. The root cause is from heap-based and other memory corruptions (overflow/invalid indexing) when processing an object...

CVE-2009-0554

CVE-2009-0554 is a remote code execution vulnerability in Microsoft Internet Explorer (IE) prior to MS09-014 that arises from uninitialized or deleted memory being referenced via a crafted web page. The Connected KB entry confirms that the fix is delivered by MS09-014 (Cumulative Security Update ...

CVE-2009-1531

CVE-2009-1531 – Microsoft Internet Explorer 7 on Windows XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 SP2. The flaw occurs when repeated calls to getElementsByTagName and object creation during element reordering, with an onreadystatechange event, access an object that is uninitialized...

CVE-2009-1918

CVE-2009-1918 affects multiple Internet Explorer versions (IE 5.01 SP4, IE 6 SP1, IE 6 on XP/2003, IE 7/8 on various Windows versions) and relates to memory corruption triggered by malformed table elements via getElementsByTagName in HTML objects. Microsoft’s MS09-034 cumulative security update f...

CVE-2009-2069

CVE-2009-2069 refers to Microsoft Internet Explorer before 8. IE caches a certificate presented via a proxy’s 4xx/5xx CONNECT response, allowing a man-in-the-middle to spoof an arbitrary HTTPS site by first obtaining a valid certificate from the site and later serving a crafted 502 page. Impact: ...

CVE-2014-0287

Technical details for CVE-2014-0287 are not provided in the supplied documents; no affected versions, root cause, impact, or fixes are stated here. Monitor for updates.

CVE-2014-0313

The CVE-2014-0313 entry corresponds to memory corruption in Microsoft Internet Explorer 10/11 triggered by a crafted web site. Connected sources confirm the affected product is Internet Explorer 10/11 and the vulnerability can allow remote code execution or memory corruption leading to denial of ...

CVE-2014-1762

CVE-2014-1762 concerns Microsoft Internet Explorer 6–11. Public advisories describe multiple remote-code-execution vulnerabilities in IE that were demonstrated in Pwn2Own contexts and involve bypassing Protected Mode/sandbox and local trust assumptions (notably via localhost) and memory-corruptio...

CVE-2014-2760

CVE-2014-2760 targets Microsoft Internet Explorer 11 and describes memory corruption via a crafted web site, enabling remote code execution or a denial of service. The available documents state IE11 as affected and do not provide concrete root-cause details, specific vulnerable components, affect...

CVE-2014-2826

CVE-2014-2826 affects Microsoft Internet Explorer 6–11. The vulnerability enables remote code execution or memory corruption when a user visits a crafted web site, as part of the IE memory corruption family. The root cause is memory corruption in IE triggered by processing malicious content from ...