CVE-2014-4090

Microsoft Internet Explorer 6–11 is affected by CVE-2014-4090 via memory corruption caused by use-after-free flaws in IE, allowing remote code execution (or memory corruption leading to DoS) when a user visits a crafted page. The connected ZDI advisories for the same era describe multiple use-aft...

CVE-2014-6344

CVE-2014-6344 affects Microsoft Internet Explorer 8 and 9. The connected sources describe a remote code execution/memory-corruption vulnerability in IE triggered by visiting a crafted page, with a specific root cause tied to the GetReplacedUrlImgCtxCookie handling (out-of-bounds indexing) as note...

CVE-2014-8967

CVE-2014-8967 is a Use-after-free in Microsoft Internet Explorer triggered by a crafted HTML/CSS token sequence (display: run-in), causing an improper CElement reference counting. The connected Nessus entry (MS15-009) confirms IE's remediation: apply security update 3034682 (and 3021952/3034196 a...

CVE-2015-0020

CVE-2015-0031 is an Internet Explorer memory corruption vulnerability (IE 6–11) that allows remote code execution via a crafted web page. The connected data confirms this as part of MS15-009 and ties it to the broader family of IE memory corruption issues. Remediation is provided by the security ...

CVE-2015-0027

Microsoft Internet Explorer 10/11 memory corruption vulnerability (CVE-2015-0027) allows remote code execution or memory corruption via a crafted web page. It is one of several IE memory corruption issues and is addressed by the MS15-009 security update for Internet Explorer (KB 3034682). Ensure ...

CVE-2015-1729

CVE-2015-1729 corresponds to a cross-domain information disclosure vulnerability in Microsoft Internet Explorer (IE9–IE11). The issue allows a remote attacker to read content from a different domain or zone via a specially crafted web page, due to how IE enforces cross-domain policies. Affected p...

CVE-2015-2404

Microsoft Internet Explorer (IE) versions 6–11 are affected by a memory corruption vulnerability exploitable via a crafted web page, potentially allowing remote code execution or memory corruption-driven denial of service. The CVE-2015-2404 entry is among a set addressed by MS15-065 (Cumulative S...

CVE-2015-6042

Microsoft Internet Explorer 11 contains a use-after-free vulnerability in the CWindow object implementation that can allow remote code execution or memory corruption via a crafted webpage. Public exploits exist for this class of issue. The vulnerability is addressed by the MS15-106 security updat...

CVE-2016-3391

CVE-2016-3391 affects Microsoft Internet Explorer 10/11 and Edge. The issue allows credential disclosure via access to a memory dump (context-dependent disclosure). Connected sources identify mitigations as local patches: IE memory-disclosure fixes delivered via MS16-118 (and related MS16-119) up...

CVE-2017-8669

CVE-2017-8669 affects Microsoft browsers in supported Windows versions (Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012 R2, Windows 10 1511/1607/1703, and Windows Server 2016) with memory handling weaknesses when rendering content. Root cause: objects i...

CVE-1999-0354

This CVE (CVE-1999-0354) affects Internet Explorer 4.x/5.x when paired with Word 97, where a Word 97 template containing executable Visual Basic code can run arbitrary programs on the IE client without warning. The issue also applies to Outlook when viewing a malicious email. The underlying risk ...

CVE-2002-1142

CVE-2002-1142 is a heap-based buffer overflow in the MDAC RDS component caused by an unchecked buffer in the RDS Data Stub when handling malformed HTTP requests. Affected: MDAC versions 2.1–2.6 and Internet Explorer 5.01–6.0. Impact: remote code execution with the privileges of the service (e.g.,...

CVE-2006-1189

Microsoft Internet Explorer suffers a remote code execution vulnerability (CVE-2006-1189) due to a buffer overflow in URLMON.DLL when parsing IDNs in double-byte character sets (DBCS). Affected browsers include IE 5.01 SP4 and IE6 across Windows 98/ME/2000/XP/Server 2003, including IE6 SP1 in var...

CVE-2007-3892

CVE-2007-3892 corresponds to an address bar spoofing vulnerability in Internet Explorer (IE 5.01–7). The issue allows spoofing of the Trust UI (address bar) after navigating from attacker-controlled content, with the content remaining that of the attacker’s page. Microsoft issued MS07-057 (Cumula...

CVE-2009-1917

CVE-2009-1917 affects multiple Internet Explorer versions (IE6/7/8) where memory objects could be accessed after deletion, enabling remote code execution via crafted HTML. The connected MSKB indicates this vulnerability was addressed by MS09-034, a cumulative IE update. The known remediation is t...

CVE-2009-2529

CVE-2009-2529 affects Microsoft Internet Explorer versions 5.01 SP4, 6, 6 SP1, 7, and 8. The vulnerability arises from improper argument validation for unspecified variables in HTML component handling, enabling remote code execution via a crafted HTML document. Public information in connected KB ...

CVE-2010-0491

CVE-2010-0491 is the IE HTML Object Memory Corruption vulnerability (Use-after-free) affecting Internet Explorer 5.01 SP4, 6, and 6 SP1. Exploitation requires crafting a page with an onreadystatechange handler to trigger arbitrary code execution; Microsoft documented this as part of MS10-018 and ...

CVE-2010-3346

CVE-2010-3346 affects Microsoft Internet Explorer 6, 7, and 8, due to a memory corruption vulnerability in the HTML+TIME/HTML element handling where an uninitialized or deleted object can be accessed, enabling remote code execution. Exploitation details in connected advisories reference a Microso...

CVE-2011-1995

Microsoft Internet Explorer versions 6–9 are affected by CVE-2011-1995 due to a memory handling flaw in OLEAuto32.dll, allowing remote code execution when an uninitialized object is accessed. The exploitation vector is a remote-triggered memory corruption via a specially crafted webpage. Patching...

CVE-2013-1304

This CVE family concerns Microsoft Internet Explorer 6–10 with a Use-After-Free vulnerability that allows remote code execution when a crafted site triggers access to a deleted object. The related entries (CVE-2013-1303, CVE-2013-1338) describe the same class of issue affecting IE and share the l...

CVE-2014-1773

Microsoft Internet Explorer 9–11 is affected by a memory corruption vulnerability exploitable via a crafted web site, potentially allowing remote code execution or a memory‑corruption denial of service. The vulnerability is shared across multiple CVEs in 2014-IE memory corruption family (e.g., CV...

CVE-2014-2761

Technical details for CVE-2014-2761 are not publicly available in the provided documents. Monitor for updates from NVD/Microsoft; connected entries reference related CVEs but do not disclose specifics for this CVE.

CVE-2014-2786

CVE-2014-2786 affects Microsoft Internet Explorer 9–11. It is a memory-corruption vulnerability in IE that allows remote code execution or memory corruption via a crafted website; exploited remotely with public exploits. Remediation is applying the MS14-037 IE update. Connected sources corroborat...

CVE-2014-4063

CVE-2014-4063 affects Microsoft Internet Explorer 6–11. A memory-corruption vulnerability exploited by visiting a crafted web site allows remote code execution or memory corruption (DoS). The issue is addressed by Microsoft security bulletin MS14-051; apply the MS14-051 updates (via Windows Updat...

CVE-2014-6354

CVE-2014-6354 affects Microsoft Internet Explorer versions 6–11. The provided documents describe a remote code execution vulnerability that allows an attacker to run arbitrary code on a vulnerable system, triggered by the victim visiting a specially crafted page or file. The initial sources do no...

CVE-2015-0019

CVE-2015-0019 affects Internet Explorer 9–11. The vulnerability lets a remote attacker execute arbitrary code or cause memory corruption by visiting a crafted webpage. Public exploits exist. Microsoft released MS15-009, addressing IE memory corruption with updates (KB 3021952 and KB 3034196) and ...

CVE-2015-0036

CVE-2015-0031 affects Microsoft Internet Explorer 6–11 and is a memory corruption remote code execution/DoS vulnerability. Root cause: an object is not properly initialized or has been deleted, leading to unsafe memory access when loading crafted pages. Affected versions are IE 6–11; remediation ...

CVE-2015-0050

CVE-2015-0050 concerns Microsoft Internet Explorer 8 and 9. The connected sources confirm a remote memory-corruption vulnerability in IE that attackers can exploit via a crafted web page to achieve arbitrary code execution or a denial of service. The issue is explicitly described as a memory-corr...

CVE-2015-0054

CVE-2015-0054 is an Internet Explorer elevation-of-privilege vulnerability (IE7–IE11) that can be exploited remotely by visiting a crafted webpage. The connected documents confirm a public exploit exists and that Microsoft released MS15-009 security updates (notably KBs 3034682/3034196/3021952) a...

CVE-2015-1665

Technical details (affected product/versions/root cause/fix) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2015-1691

Microsoft Internet Explorer 8 and 9 are affected by a memory corruption vulnerability (via a crafted web site) that could allow remote code execution or a denial of service. Connected CNVD entries note an unspecified memory corruption issue in IE; no explicit root cause details are provided beyon...

CVE-2015-2388

Microsoft Internet Explorer 8 and 9 are affected by a memory corruption vulnerability (CVE-2015-2388) that can be triggered by visiting a crafted web site, potentially allowing remote code execution or a denial of service. Connected sources corroborate IE memory corruption with exploit scenarios,...

CVE-2015-2403

CVE-2015-2403 refers to a memory-corruption vulnerability in Microsoft Internet Explorer 8 that could allow remote code execution or a denial of service when a user visits a crafted webpage. The vulnerability is described consistently across sources as affecting IE/IE8 (and variants across IE ver...

CVE-2015-6076

Microsoft Internet Explorer 7–11 contains a memory corruption vulnerability that can be exploited by a crafted web page to execute arbitrary code or cause a denial of service. The CVE-2015-6076 entry is part of a cluster of IE memory corruption flaws (distinct from other CVEs in 2015-6066, 6070, ...

CVE-2015-6160

CVE-2015-6160 affects Microsoft Internet Explorer 11. The vulnerability allows remote attackers to execute arbitrary code or cause a memory corruption-based DoS via a crafted web site. This is the Internet Explorer memory corruption vulnerability; Microsoft released MS15-124 as a fix. If exploiti...

CVE-2016-0059

CVE-2016-0059 affects Microsoft Internet Explorer (Hyperlink Object Library) and enables information disclosure from process memory when a user clicks a crafted URL in an email or Office document. Affected products include IE 9–11; root cause is improper handling of memory objects in the Hyperlin...

CVE-2016-0072

Technical details for CVE-2016-0072 are not provided in the connected documents. The available sources describe IE memory corruption/remote code execution risks in general terms for IE 9–11, but do not include product/version-specific root cause, vulnerable component, impact, or remediation for t...

CVE-2016-3240

The CVE-2016-3240 issue affects Microsoft Internet Explorer 9–11, described as a memory corruption vulnerability triggered by a crafted web site that can lead to remote code execution or a denial of service. The connected documents confirm IE 9–11 as the affected product and the memory corruption...

CVE-2018-0997

CVE-2018-0997 is a remote code execution vulnerability in Internet Explorer 11 arising from improper access to in-memory objects (memory corruption). The connected records also reference related IE memory corruption CVEs (e.g., CVE-2018-0870, CVE-2018-0991, CVE-2018-1020), confirming the issue cl...

CVE-1999-0031

The CVE-1999-0031 issue affects legacy browsers: Internet Explorer 3.x–4.x and Netscape 2.x–4.x . The vulnerability description states that JavaScript in these browsers allows remote attackers to monitor a user’s web activities (the Bell Labs vulnerability). The connected sources confirm the affe...

CVE-1999-0490

MSHTML.DLL in Internet Explorer 5.0 is affected by CVE-1999-0490. The vulnerability enables a remote attacker to cause information disclosure by using an IMG SRC tag to learn local file information. The documented impact is partial disclosure of data from the target user’s files, with network-bas...

CVE-2002-0189

Summary: IE 6.0 contains cross-site scripting vulnerabilities that let an attacker script the Local Machine Zone by abusing local HTML resources via dialog frames. Vectors/Resources: vulnerable resources include local res:// HTML objects (e.g., res://shdoclc.dll/privacypolicy.dlg and related file...

CVE-2004-0420

CVE-2004-0420 describes a remote code execution in the Windows Shell when a file is spoofed via a CLSID in the filename. The vulnerability affects Windows 98, Me, NT 4.0, 2000, XP, and Server 2003, enabling an attacker who lures a user to a malicious Web page to execute arbitrary code with the us...

CVE-2004-0839

CVE-2004-0839 is the IE Drag-and-Drop Vulnerability. The connected docs show it as a publicly disclosed CAN-2005-0053 vulnerability, which was addressed by Microsoft security updates MS05-014 and related MS05-008. The vulnerability arises from Internet Explorer handling drag-and-drop events, allo...

CVE-2005-1211

CVE-2005-1211 is an Internet Explorer PNG rendering memory corruption vulnerability (CAN-2005-1211) in the pngfilt.dll component that could allow remote code execution if a user opens a crafted PNG. Microsoft addressed this with MS05-025, delivering a security update for IE across affected Window...

CVE-2006-1190

CVE-2006-1190 concerns Microsoft Internet Explorer 5.01–6, where IOleClientSite information may be returned incorrectly when dynamically creating an embedded object. This could cause the object to run in the wrong security context/zone, enabling remote code execution or information disclosure. Th...

CVE-2009-2536

CVE-2009-2536: Microsoft Internet Explorer 5–8 remote DoS via a large length value on a Select element, causing memory consumption and application crash. Root cause is tied to the length property handling in a Select object (related CVE-2009-1692). The provided documents identify the issue and it...

CVE-2009-2764

Microsoft Internet Explorer 8.0.7100.0 on Windows 7 RC (x64) is described as vulnerable to denial of service (application crash) through a crafted DIV element combined with SCRIPT elements that have empty contents and no reference to a valid external script location. This CVE entry explicitly cov...

CVE-2010-2559

CVE-2010-2559 refers to an Uninitialized Memory Corruption vulnerability in Internet Explorer 8 where remote code execution could occur if a manipulated memory object is accessed (uninitialized or deleted). The connected KB article (MS10-002, KB 978207) describes a cumulative security update that...

CVE-2011-1256

Microsoft Internet Explorer 6–8 contains a DOM memory corruption vulnerability (CVE-2011-1256) that allows remote code execution when an attacker manipulates memory objects during page load and later accesses them. The issue is triggered by freeing an object due to modification and then accessing...