CVE-2015-0039

CVE-2015-0039 is an Internet Explorer memory‑corruption vulnerability affecting IE 10 and 11 that allows remote code execution via a crafted web site. The connected Nessus plugin MS15-009 confirms IE is vulnerable when cumulative security updates (notably 3034682) are missing, and notes that atta...

CVE-2015-1659

Microsoft Internet Explorer 11 is affected by a memory‑corruption vulnerability (CVE-2015-1659) that can be triggered by a crafted webpage, enabling remote code execution or memory corruption leading to DoS. The issue is corroborated across multiple sources referencing IE11 memory corruption vuln...

CVE-2015-1692

CVE-2015-1692 affects Microsoft Internet Explorer versions 7–11. It is a clipboard information disclosure vulnerability where a crafted web page can cause the browser to read clipboard contents via user-assisted remote attack. The underlying issue is described as an improper restriction/handling ...

CVE-2015-2388

Microsoft Internet Explorer 8 and 9 are affected by a memory corruption vulnerability (CVE-2015-2388) that can be triggered by visiting a crafted web site, potentially allowing remote code execution or a denial of service. Connected sources corroborate IE memory corruption with exploit scenarios,...

CVE-2015-2449

CVE-2015-2449 affects Microsoft Internet Explorer (IE) versions 7–11 and Microsoft Edge, with the underlying issue described as an ASLR (Address Space Layout Randomization) bypass by visiting a crafted web page. Technical details in the connected documents confirm affected products and that the v...

CVE-2016-0067

Microsoft Internet Explorer 9–11 (IE) is affected by CVE-2016-0067, a memory-corruption vulnerability triggered by visiting a crafted web site that can lead to remote code execution or memory-corruption–based denial of service. The issue is the same family as other 2016 IE memory-corruption CVEs ...

CVE-2016-0071

CVE-2016-0071 is a memory corruption vulnerability in Microsoft Internet Explorer 9. A crafted web site can trigger memory corruption, enabling remote code execution or a denial of service. The issue is addressed by the MS16-009 update (Cumulative Security Update for Internet Explorer), which cov...

CVE-2016-3241

CVE-2016-3241 concerns Microsoft Internet Explorer 9–11. The provided documents describe a memory corruption vulnerability that allows remote code execution or a denial of service via a crafted web site. The sources do not specify the exact vulnerable component/version details beyond IE9–IE11 and...

CVE-2016-3387

CVE-2016-3387 affects Microsoft Internet Explorer 10/11 and Microsoft Edge. The root cause is failure to properly restrict access to private namespaces, enabling remote attackers to elevate privileges via unspecified vectors. Public references show exploits linked to Exploit-DB (e.g., 40607), and...

CVE-2016-7281

CVE-2016-7281 affects Microsoft Internet Explorer (IE10/IE11) and Microsoft Edge. The Web Workers implementation allows remote attackers to bypass the Same Origin Policy via unspecified vectors, enabling cross-origin access that should be restricted. Root cause per the description is a security f...

CVE-2017-11790

CVE-2017-11790 is an information disclosure in Internet Explorer. The vulnerability stems from how IE handles objects in memory, allowing an attacker to obtain information that could help further compromise the user’s system. Affected products include Internet Explorer on multiple Windows version...

CVE-2000-0201

The CVE concerns Internet Explorer 5.x where window.showHelp() can execute compiled HTML help files (CHM) from non-local paths, enabling arbitrary code via Microsoft Networking. Technical context from connected docs shows the vulnerability can be triggered when a CHM is placed locally or accessib...

CVE-2003-0309

The CVE covers Microsoft Internet Explorer 5.01, 5.5, and 6.0 where a crafted web document with a large number of duplicate file:// or other requests using FRAME/IFRAME can trigger multiple file download dialogs, ultimately allowing remote code execution. The issue is mitigated by Microsoft patch...

CVE-2003-1025

CVE-2003-1025 involves Internet Explorer 5.01–6 SP1 and is caused by an improper URL canonicalization in the HTTP URL parsing, enabling remote spoofing of the address bar with a specially crafted URL (example: a %01 before an @ sign). The vulnerability could let a malicious page display a false a...

CVE-2004-0284

CVE-2004-0284 affects Microsoft Internet Explorer 6.0, Outlook 2002, and Outlook 2003. The vulnerability allows a remote attacker to cause a denial of service (CPU consumption) when the user views a web site or HTML e‑mail that contains two null characters (%00) after the host name, and the setti...

CVE-2005-1989

CVE-2005-1989 is part of a set of Internet Explorer flaws affecting IE 5.0/5.5/6.0 via Web Folder Behaviors Cross‑Domain Vulnerability (CAN-2005-1989) and related issues (CAN-2005-1988 JPEG Rendering; CAN-2005-1990 COM Object Instantiation). The connected records confirm a cross‑domain informatio...

CVE-2006-5152

Technical details about CVE-2006-5152 (product, version, root cause, impact, fix) are not provided in the connected documents; available materials reference related CVEs and general XSS context but do not specify this CVE’s particulars. Monitor for updates.

CVE-2007-5347

CVE-2007-5347 is a DHTML Objects Memory Corruption vulnerability in Microsoft Internet Explorer (IE) affecting IE 5.01 through 7. An attacker could cause remote code execution by visiting a specially crafted page, via unexpected method calls to HTML objects. The issue is addressed by Microsoft Se...

CVE-2008-4261

CVE-2008-4261 describes a stack-based buffer overflow in Microsoft Internet Explorer (IE) affecting IE 5.01 SP4, IE 6 SP1 on Windows 2000, and IE 6 on Windows XP/Server 2003. The vulnerability stems from improper handling of extraneous data tied to an embedded object in a web page, enabling remot...

CVE-2008-5556

Summary of CVE-2008-5556 : The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 fails to recognize certain attack patterns when pages use utf-7 encoding, allowing potential XSS bypass. The vendor reportedly disputes the issue, stating behaviour is by design. Connected sources (OpenVAS/PT Secu...

CVE-2008-5912

CVE-2008-5912 is an information-disclosure issue affecting Microsoft Internet Explorer. Connected scanners describe an IE information-disclosure vulnerability where a JavaScript-related function exposes a “temporary footprint” during an active user login, which could ease in-session phishing by p...

CVE-2009-0553

This CVE (CVE-2009-0553) is an Uninitialized Memory Corruption vulnerability in Internet Explorer. The issue allows remote code execution when a user views a crafted page that triggers an object in memory that was not properly initialized or was deleted. Affected products include IE 6/7 on Window...

CVE-2009-2433

The CVE-2009-2433 issue affects Microsoft Internet Explorer, with a stack-based buffer overflow in the AddFavorite method triggered by a long URL in the first argument. This vulnerability allows remote attackers to cause an application crash (DoS) and potentially other impact, as described in mul...

CVE-2009-2764

Microsoft Internet Explorer 8.0.7100.0 on Windows 7 RC (x64) is described as vulnerable to denial of service (application crash) through a crafted DIV element combined with SCRIPT elements that have empty contents and no reference to a valid external script location. This CVE entry explicitly cov...

CVE-2009-3672

CVE-2009-3672 is a memory-corruption vulnerability in Microsoft Internet Explorer 6/7 related to getElementsByTagName for the STYLE element, with corruption of objects in mshtml.dll when outerHTML is changed. It allows remote code execution and is associated with the MS09-072 bulletin; patches/up...

CVE-2009-4073

CVE-2009-4073 affects Microsoft Internet Explorer’s printing functionality when a local HTML page is printed to PDF. The issue exposes local filesystem information by allowing a PDF generated from a local page to include the dc:title element that can reveal the file path, and possibly the usernam...

CVE-2010-3327

CVE-2010-3327 – Anchor Element Information Disclosure Vulnerability : Affected software is Internet Explorer 6–8. The issue stems from the Anchor element not being removed during paste/edit operations, potentially exposing deleted content to page visitors. The vulnerability is an information-disc...

CVE-2011-0346

CVE-2011-0346 corresponds to a family of memory‑corruption issues in Microsoft Internet Explorer’s MSHTML.DLL, specifically in the ReleaseInterface() path. The connected sources identify the affected component as IE versions 6–8 and describe a use‑after‑free vulnerability that can trigger via DOM...

CVE-2011-1255

CVE-2011-1255 affects Microsoft Internet Explorer 6–8, where the HTML+TIME (Timed Interactive Multimedia Extensions) implementation mishandles in-memory objects, enabling remote code execution via deleted/uninitialized HTML+TIME objects (notably t:transitionFilter). Connected reports confirm vuln...

CVE-2011-1998

CVE-2011-1998 maps to a remote-code-execution vulnerability in Microsoft Internet Explorer 9 (Jscript9.dll memory handling). Root cause: memory corruption from improper handling of an initialized object in memory. Impact: remote attackers could execute arbitrary code via a malicious webpage. Miti...

CVE-2011-2383

CVE-2011-2383 affects Microsoft Internet Explorer 9 and earlier. The issue is an incomplete fix that allows cross-zone drag-and-drop via an IFRAME with an http: SRC that redirects to a file: URL, enabling a user-assisted read of cookies (cookiejacking). The vulnerability is documented with the ex...

CVE-2013-0811

CVE-2013-0811 is a use-after-free vulnerability in Microsoft Internet Explorer 8 and 9 that allows remote code execution when a user visits a crafted site triggering access to a deleted object. The underlying cause is memory corruption through use-after-free conditions. Impact is code execution i...

CVE-2014-0293

CVE-2014-0293 affects Microsoft Internet Explorer 9–11. The vulnerability allows a remote attacker to read content from a different domain or security zone when a user visits a crafted web page, enabling cross-domain information disclosure. The underlying issue is described as cross-domain inform...

CVE-2014-0314

The CVE-2014-0314 entry concerns Microsoft Internet Explorer 9 and 10, where a crafted webpage could trigger remote code execution or memory corruption. Public details in the provided documents confirm a memory-corruption vulnerability with a security update MS14-012 (2925418) issued by Microsoft...

CVE-2014-1753

CVE-2014-1753 concerns memory corruption in Microsoft Internet Explorer. Public records describe it as remote code execution/DoS via a crafted web site. Connected advisories (MS14-018) indicate IE multiple memory corruption vulnerabilities addressed by a cumulative update and list affected versio...

CVE-2014-1765

CVE-2014-1765 refers to multiple use-after-free vulnerabilities in Microsoft Internet Explorer (IE) versions 6–11 that can lead to remote code execution when a user visits a malicious page or when a crafted document is opened. The ZDI advisories (ZDI-14-261 and ZDI-14-223) describe concrete use-a...

CVE-2014-4058

CVE-2014-4058 affects Microsoft Internet Explorer 9–11. The vulnerability enables remote attackers to execute arbitrary code or cause a denial of service through a crafted web page, via memory corruption. Connected sources point to a use-after-free in IE’s scripting element handling (CScriptEleme...

CVE-2014-6346

CVE-2014-6346 affects Microsoft Internet Explorer 8–11 and is described as a cross-domain information-disclosure vulnerability. The root cause involves improper enforcement of cross-domain policies that can allow a crafted web page to read content from another domain or security zone. Public expl...

CVE-2014-6348

CVE-2014-6348 affects Microsoft Internet Explorer 9. The provided description states that remote attackers can exploit a memory corruption issue via a crafted web site to execute arbitrary code or cause a denial of service. This entry is linked to IE9 and is distinguished from CVE-2014-6342. No c...

CVE-2015-0021

CVE-2015-0021 is an Internet Explorer memory corruption vulnerability disclosed as part of MS15-009. The issue allows remote code execution or a memory corruption triggering a DoS when a user visits a crafted webpage, impacting IE versions 6 through 11. Public exploits exist. The connected adviso...

CVE-2015-0023

CVE-2015-0023 refers to a memory corruption vulnerability in Internet Explorer 10 that can be exploited via a crafted web site to execute arbitrary code or cause a crash. Connected documents indicate that MS15-009 (security update 3034682) patches Internet Explorer and the update is required for ...

CVE-2015-0025

CVE-2015-0025 maps to a Microsoft Internet Explorer 10 memory corruption vulnerability triggered by a crafted web page. The connected Nessus entry (MS15-009) notes this family of bugs affects IE and requires security update 3034682 for protection; full mitigation may also require updates 3021952 ...

CVE-2015-0035

CVE-2015-0035 is an Internet Explorer memory corruption vulnerability affecting IE10/IE11, allowing remote code execution via a crafted web page. The associated Nessus plugin (MS15-009) notes that systems missing cumulative security update 3034682 are affected and require the update for mitigatio...

CVE-2015-1684

CVE-2015-1684 affects the VBScript engine (VBScript.dll) in Microsoft VBScript 5.6–5.8 used by Internet Explorer 8–11. The issue is an ASLR bypass caused by memory handling during regex processing, enabling remote-style ASLR bypass via a crafted web page. Connected advisories confirm ASLR bypass ...

CVE-2015-1738

The provided connected documents confirm a memory corruption vulnerability in Microsoft Internet Explorer versions 8 and 9, exploitable via a crafted web site that can lead to remote code execution or a denial of service. The root cause details are not explicitly described in the sources, and no ...

CVE-2015-2402

CVE-2015-2402 affects Microsoft Internet Explorer 7–11. Description states a remote attacker can gain privileges via a crafted webpage (Internet Explorer Elevation of Privilege). Public records reference the MS15-065 security update (KB3076321, with related updates KB3065822/KB3076321) as remedia...

CVE-2015-6049

CVE-2015-6049 relates to a memory corruption vulnerability in Microsoft Internet Explorer 7–11, exploitable via a crafted website to remotely execute code or cause a denial of service. Connected documents identify slightly different but related issues (e.g., type confusion/memory corruption via C...

CVE-2015-6051

CVE-2015-6051 affects Microsoft Internet Explorer 10 and 11. The vulnerability is an elevation of privilege caused by an error in how Internet Explorer validates permissions under specific conditions, enabling a crafted website to transition from Low Integrity to Medium (and related privilege lev...

CVE-2015-6052

CVE-2015-6052 covers a security feature bypass in the VBScript 5.7/5.8 and JScript 5.7/5.8 engines used by Internet Explorer 8–11 and other products. A remote attacker could bypass ASLR via a crafted website. The issue is described as a VBScript/JScript ASLR bypass affecting IE components; relate...

CVE-2015-6134

Microsoft Internet Explorer 9 is affected by CVE-2015-6134 (Memory Corruption Vulnerability) where a crafted web site can trigger remote code execution or memory corruption. Root cause is memory corruption triggered by processing crafted content, with impact of potential remote code execution or ...