CVE-2013-1308

Technical details for CVE-2013-1308 are not publicly provided in the supplied documents. Monitor for updates from official advisories and vulnerability catalogs.

CVE-2008-4844

CVE-2008-4844 is a use-after-free vulnerability in the MSHTML component (CRecordInstance::TransferToDestination) of mshtml.dll that affects Internet Explorer 5.01/6/6 SP1/7. Exploitation enables remote code execution via crafted HTML/XML containing DSO bindings (XML Island, XML DSOs, or Tabular D...

CVE-2014-2822

Technical details for CVE-2014-2822 are not publicly provided in the connected documents. Monitor for updates.

CVE-2013-1309

CVE-2013-1309 corresponds to the Internet Explorer Use-After-Free vulnerability (MS13-037) affecting IE 6–10. The issue arises from use-after-free in memory handling (notably related to CDispNode/vgx.dll) when processing certain web content, enabling remote code execution via a crafted site. Publ...

CVE-2017-8522

CVE-2017-8522 affects Microsoft Windows browsers (IE/Edge) and the scripting engine, where memory handling of objects can cause arbitrary code execution. The issue is described as a Scripting Engine Memory Corruption Vulnerability impacting Windows 8.1/RT 8.1, Server 2012/R2, 2016, and Windows 10...

CVE-2013-3144

Microsoft Internet Explorer 8–10 is affected by a memory corruption vulnerability exploitable via a crafted web site (CVE-2013-3144 family). The connected data confirms related exploitation activity (MS13-055) targeting IE8 with a use-after-free in CAnchorElement handling, and publicly available ...

CVE-2018-8372

Microsoft Edge Chakra (ChakraCore) and Internet Explorer are affected by a remote code execution vulnerability in the scripting engine due to memory-object handling issues. The CVE-2018-8372 family (and related CVEs) describes a memory-corruption flaw that enables code execution via crafted objec...

CVE-2013-3151

CVE-2013-3163 corresponds to a memory corruption vulnerability in Microsoft Internet Explorer 8–10 that could be triggered by visiting a crafted website, enabling remote code execution or a denial of service. Public documentation in the connected sources consistently describes it as Internet Expl...

CVE-2019-0862

CVE-2019-0862 is a remote code execution vulnerability in Microsoft Internet Explorer, caused by memory handling issues in the scripting engine. The CVE is linked to IE10/IE11 and was demonstrated by an exploit in IE’s scripting engine memory objects, with public exploit details noting a February...

CVE-2018-8385

CVE-2018-8385 describes a remote code execution vulnerability in how the Microsoft scripting engine handles objects in memory, leading to memory corruption. Affected products listed in the description include Internet Explorer 9, ChakraCore, Internet Explorer 11, Microsoft Edge, and Internet Expl...

CVE-2018-8353

Technical details (affected products, vulnerable components, impact, exploitation) are not publicly provided in the connected documents supplied. Monitor for updates from official advisories and CVE records.

CVE-2019-0753

Technical details for CVE-2019-0753 are not publicly available in the provided documents. Monitor for updates from connected sources.

CVE-2017-0226

Technical details for CVE-2017-0226 are not publicly provided in the initial description or connected documents. Monitor for updates; no concrete specifics (affected product/version, root cause, or fix) are disclosed here.

CVE-2018-8389

CVE-2018-8389 and related entries describe a remote code execution vulnerability in the Microsoft scripting engine’s handling of in-memory objects, affecting ChakraCore , Internet Explorer 11 , and Microsoft Edge . The root cause is memory handling in the scripting engine that can lead to memory ...

CVE-2018-8355

CVE-2018-8355 is a remote code execution vulnerability in Microsoft’s scripting stack (ChakraCore, Internet Explorer 11, Edge) due to memory handling flaws in the scripting engine. Public details in connected sources point to an object/memory handling vulnerability exploited via type-confusion in...

CVE-2018-8371

Technical details about CVE-2018-8371 are not publicly provided in the supplied connected documents. Monitor for updates; no product/version/impact specifics are disclosed here.

CVE-2017-0018

Technical details for CVE-2017-0018 are not publicly available in the provided connected documents. Monitor for updates from official advisories and vulnerability catalogs to obtain affected products, impact, and remediation information.

CVE-2018-8242

Technical details specific to CVE-2018-8242 are not provided in the connected documents; information about affected products, root cause, or fixes is lacking here. Monitor for updates.

CVE-2018-8288

CVE-2018-8288 is a remote code execution vulnerability in ChakraCore, Internet Explorer 11, and Microsoft Edge caused by memory handling of objects in the scripting engine (memory corruption). The CVE notes high impact with network access and required user interaction. Public references in the co...

CVE-2012-1876

CVE-2012-1876 affects Microsoft Internet Explorer 6–9 and IE10 (Consumer Preview); memory handling flaw when accessing a nonexistent object triggers a heap-based overflow, enabling remote code execution. Exploitation demonstrated (MS12-037), with multiple public exploits and bypass techniques (AS...

CVE-2017-0008

Technical details for CVE-2017-0008 are not publicly available in the provided documents. Monitor for updates from official advisories; referenced items cover related CVEs but do not specify this CVE’s specifics.

CVE-2018-8291

The CVE-2018-8291 entry describes a remote code execution in the ChakraCore scripting engine affecting ChakraCore, Internet Explorer 11, and Microsoft Edge due to memory handling in scripting objects. Root cause: memory object handling in the scripting engine leading to RCE. Public references sho...

CVE-2018-8296

Technical details for CVE-2018-8296 are not publicly provided in the connected documents. Monitor for updates, as no specifics on affected products, root cause, impact, or fixes are included here.

CVE-2017-0009

Technical details about CVE-2017-0009 are not provided in the connected documents. Public details appear limited to the NVD description; monitor for updates from official advisories.

CVE-2017-0231

Public technical details for CVE-2017-0231 are not provided in the connected documents. They only state a SmartScreen spoofing issue in Microsoft browsers; no affected products, versions, or remediation are specified. Monitor for updates.

CVE-2018-8287

CVE-2018-8287 describes a remote code execution vulnerability in the ChakraCore scripting engine and affected Microsoft browsers (Internet Explorer 11, Edge) due to memory handling. The connected advisories (GHSA) mirror the description and identify ChakraCore as the affected component; no specif...

CVE-2015-2383

CVE-2015-2425, as documented in the CVE list and CIRCL sightings, is a memory-corruption vulnerability in Microsoft Internet Explorer 11 that allows remote attackers to run arbitrary code or cause a denial of service by presenting a crafted web site. The issue is explicitly described as distinct ...

CVE-2015-2384

CVE-2015-2384 is a Microsoft Internet Explorer 11 memory-corruption vulnerability exploitable via a crafted web site, potentially leading to remote code execution or DoS. The connected sources confirm the same class of issue (IE11 memory corruption) and tie this CVE to MS15-065 (Cumulative Securi...

CVE-2007-3670

CVE-2007-3670 describes an argument-injection vulnerability where Internet Explorer could pass malicious parameters to registered Firefox handlers (FirefoxURL/FirefoxHTML) on Windows, enabling cross-browser scripting and potential remote code execution by exploiting the unescaped URL argument whe...

CVE-2010-0806

CVE-2010-0806 is a use-after-free in Internet Explorer’s iepeers.dll (affecting IE 6/6 SP1/7). The vulnerability arises from access to an invalid pointer after object deletion, enabling remote code execution. It was exploited in the wild around March 2010. Public fixes include Microsoft Security ...

CVE-2020-1213

Technical details about CVE-2020-1213 are not provided in the supplied documents. The connected EUVD entries reference malware but do not describe this CVE. Monitor for official disclosures or patched advisories.

CVE-2012-1858

CVE-2012-1858 concerns the toStaticHTML (SafeHTML) sanitization function used in Internet Explorer 8/9, SharePoint, and Lync/Communicator. The vulnerability arises because the HTML sanitization logic can be bypassed via crafted HTML/CSS, enabling cross-site scripting (XSS) or information disclosu...

CVE-2019-1059

Technical details about CVE-2019-1059 (affected product, root cause, impact, or remediation) are not provided in the supplied documents; please monitor for updates.

CVE-2019-1004

Technical details about CVE-2019-1004 are not publicly provided in the connected documents. The supplied sources do not specify affected products, root cause, or remediation for this CVE. Monitor for updates.

CVE-2019-1063

Technical details about CVE-2019-1063 are not publicly provided in the supplied connected documents. Please monitor for updates from official sources for affected products, impact, and fixes.

CVE-2014-0288

CVE-2014-0288 affects Microsoft Internet Explorer 9–11. A crafted web site can trigger a memory corruption vulnerability allowing remote code execution or denial of service. The vulnerability is part of a set of IE memory corruption issues (distinct from CVE-2014-0270/0273/0274). Public reporting...

CVE-2012-4787

CVE-2012-4787 is a use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 caused by improper ref counting when accessing an object that is not properly initialized or has been deleted. A remote attacker could trigger code execution by convincing a user to open a crafted webpage. The...

CVE-2007-2221

CVE-2007-2221 corresponds to a vulnerability in the mdsauth.dll ActiveX control used by Microsoft Windows Media Services within Internet Explorer. The mdsauth.dll COM object can be instantiated via IE, enabling an attacker to overwrite arbitrary files on a vulnerable system, potentially allowing ...

CVE-2020-1214

CVE-2020-1214 is a remote code execution vulnerability tied to the VBScript engine’s in‑memory object handling in Internet Explorer (VBScript engine, IE 9/11). The entry is linked to related VBScript RCE CVEs (CVE-2020-1215, CVE-2020-1230, CVE-2020-1213, CVE-2020-1216, CVE-2020-1260), indicating ...

CVE-2020-1230

CVE-2020-1230 is tied to a VBScript Engine remote code execution vulnerability. Connected document CNVD-2021-24006 describes a remote code execution flaw in the VBScript Engine for Internet Explorer (IE) versions 9 and 11, indicating the root cause is in memory object handling by VBScript. The CV...

CVE-2015-6161

CVE-2015-6161 affects Microsoft Internet Explorer (IE) 7–11 and Microsoft Edge, with the root cause described as a bypass of Address Space Layout Randomization (ASLR) via a crafted web site. Public sources in the connected documents confirm this is mitigated by Microsoft security updates MS15-124...

CVE-2020-1260

CVE-2020-1260 is described as a remote code execution vulnerability in the VBScript engine, arising from how memory objects are handled, which could allow an attacker to run arbitrary code in the context of the affected user. The CNVD entry explicitly links this class of vulnerability to Microsof...

CVE-2020-1216

CVE-2020-1216 corresponds to a VBScript Engine remote code execution in Microsoft Internet Explorer. The connected CNVD entry describes a remote code execution vulnerability in the VBScript Engine for IE (VBScript memory object handling) affecting IE 9 and IE 11, enabling code execution in the co...

CVE-2013-3143

CVE-2013-3143 : Use-after-free/memory corruption in Microsoft Internet Explorer 9 and 10 (IEFRAME CMarkup..RemovePointerPos) triggered by a crafted web page. Affects IE9/IE10 via crafted site; exploitable via remote attacker. Public exploit exists (Exploit-DB entry 40923). Patch referenced in MS1...

CVE-2020-17052

CVE-2020-17052 is a Scripting Engine Memory Corruption Vulnerability. Connected data confirms the issue as a memory corruption in a scripting engine and labels it with CVSS metrics (CVSSv3.1 base score 8.1, high impact on confidentiality, integrity, and availability; network attack vector; no pri...

CVE-2020-0768

Technical details for CVE-2020-0768 are not provided in the connected documents. Public details appear limited to initial description. Monitor for updates from official sources.

CVE-2020-0833

Technical details about CVE-2020-0833 are not provided in the connected documents. Please monitor for updates.

CVE-2009-2500

This CVE corresponds to MS09-062: GDI+ WMF Integer Overflow Vulnerability. Affected are Microsoft GDI+ image-processing paths used by WMF, PNG, TIFF, BMP handling across Windows components and Office/Viewer products (e.g., IE6, Office suites, Visio, Project, SQL/Report Viewer, Forefront Client Se...

CVE-2019-0608

Technical details about CVE-2019-0608 are not publicly available in the provided documents. The connected EUVD and MSKB entries do not specify affected products, impact, or remediation. Monitor for updates as new information becomes available.

CVE-2012-2546

The CVE-2012-2546 entry concerns a memory-use-after-free vulnerability in Microsoft Internet Explorer 9 (IE9) related to the Event Listener use-after-free vulnerability. The underlying issue is a use-after-free in IE9’s event listener handling that can allow remote attackers to execute arbitrary ...