CVE-2015-6134

Microsoft Internet Explorer 9 is affected by CVE-2015-6134 (Memory Corruption Vulnerability) where a crafted web site can trigger remote code execution or memory corruption. Root cause is memory corruption triggered by processing crafted content, with impact of potential remote code execution or ...

CVE-2016-0062

CVE-2016-0062 affects Microsoft Internet Explorer 11 and Microsoft Edge, allowing remote code execution or memory corruption via a crafted web page. Public documentation confirms IE and Edge are vulnerable to memory corruption and remote execution in response to specially crafted content. Mitigat...

CVE-2016-3245

CVE-2016-3245 affects Internet Explorer 9–11. It is a security feature bypass that lets remote attackers trick users into connecting to a restricted TCP port via a crafted web page. The vulnerability impacts multiple Windows IE versions and is addressed by Microsoft in MS16-084 (security update K...

CVE-2016-3329

CVE-2016-3329 affects Internet Explorer 9–11 and Microsoft Edge. It is an information-disclosure flaw where a crafted webpage can reveal the existence of files on the user’s system. Root cause relates to how browsers handle memory objects/page content, enabling an attacker to infer file presence....

CVE-2000-0162

Technical details (affected product/version, exploitability, and mitigations) are not publicly available in the provided documents. Monitor for updates from official advisories to confirm impact and remediation guidance.

CVE-2002-0648

CVE-2002-0648 is a XML Redirect Information Disclosure vulnerability in Internet Explorer (affecting IE 5.01/5.5/6.0 with the ability to read XML data from a local file via a redirected src URL). The connected MS05-025 document describes a security update (KB883939) that mitigates this class of v...

CVE-2003-0113

CVE-2003-0113 concerns Microsoft Internet Explorer 5.01, 5.5 and 6.0. The issue is a buffer overflow in URLMON.DLL that can be triggered by an HTTP response containing abnormally long values in the Content-Type and Content-Encoding headers. Successful exploitation could allow an attacker to execu...

CVE-2003-0116

CVE-2003-0116 affects Microsoft Internet Explorer 5.01, 5.5 and 6.0. The vulnerability arises from IE not properly validating the Cascading Style Sheet input parameter used by Modal dialogs, enabling remote code execution where an attacker can run script in a dialog and read local files via a cra...

CVE-2003-0809

Microsoft Internet Explorer 5.01–6.0 is affected by CVE-2003-0809 due to improper handling of object tags returned from a Web server during XML data binding, enabling remote code execution via HTML email or web pages. Affected software: IE 5.01–6.0. Root cause: object/HTML data binding issue in I...

CVE-2003-0814

CVE-2003-0814 affects Internet Explorer 6 SP1 and earlier. The flaw, known as ExecCommand Cross Domain, allows a malicious page to bypass cross-domain zone restrictions and execute Javascript or potentially run code in the user’s context by abusing the window.execCommand('Refresh') flow. Connecte...

CVE-2004-2383

Microsoft Internet Explorer 5.0–6.0 is identified as vulnerable to a Cross-Frame Scripting Restriction bypass (CVE-2004-2383). The issue arises when an HTML document with JavaScript outside a frameset that includes the target domain can cause the frameset to retain focus, enabling an attacker to ...

CVE-2006-1185

CVE-2006-1185 is an HTML Parsing vulnerability in Microsoft Internet Explorer 5.01 through 6 that can allow remote code execution via specially crafted HTML causing memory corruption. The connected MS06-013 documentation confirms this as a remote code execution flaw and describes that Microsoft r...

CVE-2006-1192

CVE-2006-1192 refers to an Address Bar Spoofing vulnerability in Internet Explorer 5.01–6 where phishing could be facilitated by persisting window content and trust UI after navigation, allowing a malicious page to display a legitimate URL while loading content from another site. The Connected do...

CVE-2007-0218

CVE-2007-0218 affects Microsoft Internet Explorer 5.01, 6, and 7. The vulnerability arises when IE instantiates certain COM objects from urlmon.dll, causing memory corruption during IObjectSafety calls and enabling remote code execution. Microsoft’s MS07-033 security update mitigates this by upda...

CVE-2007-2216

Summary: CVE-2007-2216 affects the tblinf32.dll ActiveX control in Internet Explorer (versions 5.01, 6 SP1, 7). The vulnerability stems from an incorrect IObjectsafety implementation, enabling remote code execution when a user loads a crafted web page. The attack path involves a crafted DLL argum...

CVE-2007-3954

Technical details for CVE-2007-3954 are not publicly available in the provided connected documents. The materials do not specify affected products, versions, impact, exploit status, or remediation. Monitor for updates and rely on official advisories for precise information.

CVE-2009-1529

Microsoft Internet Explorer 7 (Windows XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 SP2) contains a memory corruption vulnerability in the setCapture path. The flaw occurs when setCapture is invoked on a crafted collection of objects, leading to uninitialized memory corruption and pote...

CVE-2009-1532

Microsoft Internet Explorer 8 on Windows XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, and Server 2008 SP2 is affected by an HTML/HTML object memory corruption vulnerability triggered by malformed row property references, leading to remote code execution if a user visits a crafted page. The root ca...

CVE-2009-2064

The CVE-2009-2064 issue affects Microsoft Internet Explorer 8 (and possibly other versions). It describes a cross-context content loading flaw where an HTTPS page loads HTTP content because the top-level frame is HTTPS, allowing an MITM attacker to modify an HTTP page to include an HTTPS iframe t...

CVE-2010-2558

CVE-2010-2558 corresponds to a remote-code-execution vulnerability in Microsoft Internet Explorer (IE 6, 7, and 8) caused by a race condition that may corrupt memory when handling an in-memory object. Attackers can lure a user to view a specially crafted page, triggering arbitrary code execution ...

CVE-2011-2001

Microsoft Internet Explorer 6–9 were vulnerable to a remote code execution via memory corruption in the handling of objects, specifically a logic error in SetExpandedClipRect that could corrupt a vftable pointer in mshtml.dll. Exploitation requires a user to view a malicious page, enabling code e...

CVE-2013-0025

CVE-2013-0025 is a use‑after‑free vulnerability in Microsoft Internet Explorer 8 that allows remote code execution when a crafted page triggers access to a deleted object (the classic SLayoutRun UAF). Public details describe an attacker exploiting a freed CParaElement/CTDoc scenario during relayo...

CVE-2014-0286

CVE-2014-0286 affects Microsoft Internet Explorer 6–11. The vulnerability is a memory corruption issue triggered by visiting a crafted web site, enabling remote code execution or memory corruption. Public exploits are known, and this vulnerability is distinct from CVE-2014-0275 and CVE-2014-0285....

CVE-2014-0305

CVE-2014-0305 concerns Microsoft Internet Explorer 6–11 and involves memory corruption triggered by a crafted web site, leading to remote code execution or a denial of service. The connected documents confirm similar family vulnerabilities (CVE-2014-0299 and CVE-2014-0311) with the same memory-co...

CVE-2014-0324

Microsoft Internet Explorer 8–11 contains a memory corruption vulnerability (CVE-2014-0324) that allows remote code execution or denial of service via a crafted web site. The entry is part of a set of IE memory‑corruption CVEs and is documented in NVD with a high (9.3) CVSS, network attack vector...

CVE-2014-1815

CVE-2014-1815 concerns memory corruption in Microsoft Internet Explorer versions 6–11 triggered by visiting a crafted web site. The connected documents confirm IE as the affected product and cite a memory-corruption vulnerability that could allow remote code execution or memory corruption-based d...

CVE-2014-2759

CVE-2014-2759 affects Microsoft Internet Explorer 9–11 and is described as a memory corruption vulnerability exploitable via a crafted web site. The vulnerability could allow remote code execution or a denial of service. The cited connected records all reference the same issue (distinct from othe...

CVE-2014-2769

The Connected document references CVE-2014-1772 (an Internet Explorer memory-corruption issue) and provides a root-cause analysis of that UAF-type vulnerability, noting that Microsoft released MS14-035 to patch it. The analysis describes triggering the issue via a crafted web page and includes a ...

CVE-2014-2782

Microsoft Internet Explorer 9–11 is affected by CVE-2014-2782 (Memory Corruption via crafted web content). The vulnerability is described as a use-after-free/memory corruption issue arising when IE processes certain HTML/script handling, enabling remote code execution or a memory corruption-based...

CVE-2014-2797

CVE-2014-2797 is a remote memory-corruption vulnerability in Microsoft Internet Explorer that allows an attacker to execute arbitrary code or cause a denial of service by a crafted web page. The KLA10602 and related advisories indicate multiple IE vulnerabilities were reported around MS14-037, wi...

CVE-2014-2801

CVE-2014-2801 affects Microsoft Internet Explorer 10–11, allowing remote code execution or memory corruption via a crafted webpage. Public exploitation is noted. The fixed version is via MS14-037 (security update MS14-037 / KB2975687) for IE10/IE11; apply the July 8, 2014 update to mitigate. If e...

CVE-2014-4066

CVE-2014-4066 corresponds to a memory corruption vulnerability in Microsoft Internet Explorer 11 that can be triggered by visiting a crafted web site, potentially allowing remote code execution or memory corruption leading to a denial of service. The description in multiple sources identifies IE1...

CVE-2015-1667

CVE-2015-1667 is a memory‑corruption remote‑code‑execution vulnerability in Microsoft Internet Explorer 8–11. A crafted web page can trigger code execution or a memory corruption DoS. Multiple reputable sources describe this as part of MS15-032 and list IE versions 6–11 as affected. The primary d...

CVE-2015-1694

CVE-2015-1694 affects Microsoft Internet Explorer 6–11, caused by a memory corruption vulnerability exploitable via a crafted web site. Reported as a remote code execution/denial of service risk, it is a separate issue from CVE-2015-1710. Public details in NVD and CNVD entries describe the vulner...

CVE-2015-1706

CVE-2015-1706 describes a memory corruption vulnerability in Microsoft Internet Explorer 11 that can be triggered by a crafted web site to allow remote code execution or a memory-based denial of service. Connected CNVD entries corroborate a memory-corruption flaw in Internet Explorer but do not p...

CVE-2015-1745

CVE-2015-1745 affects Microsoft Internet Explorer 6–11. The connected sources identify this as the “Internet Explorer Memory Corruption Vulnerability” and confirm it is a memory corruption issue that could allow remote code execution or a denial of service when visiting a crafted site. The vulner...

CVE-2015-2406

Microsoft Internet Explorer Memory Corruption vulnerabilities (CVE-2015-2406) affect IE 6–11. The root cause is a memory corruption error when accessing a memory object that has been deleted, enabling remote code execution or memory denial-of-service via crafted web pages. Connected advisories (M...

CVE-2015-2414

CVE-2015-2414 affects Microsoft Internet Explorer 8–11. The vulnerability allows a remote attacker to obtain sensitive browsing-history information via image caching vectors, i.e., an information-disclosure vulnerability. Connected sources corroborate IE as the affected product family and describ...

CVE-2015-2447

CVE-2015-2447 describes a memory corruption vulnerability in Microsoft Internet Explorer 11 accessible via a crafted web site. The NVD entry states that remote attackers can execute arbitrary code or cause a denial of service. Connected OpenVAS entries reference IE-related vulnerabilities and Mic...

CVE-2015-2489

CVE-2015-2489 affects Internet Explorer 11. The vulnerability enables elevation of privilege when a user visits a crafted website, by transitioning from Low Integrity to Medium Integrity due to improper privilege validation. The practical impact is privilege escalation on vulnerable IE11 installa...

CVE-2015-6073

CVE-2015-6073 targets Microsoft Internet Explorer 11 and Microsoft Edge with a memory-corruption vulnerability exploitable via a crafted web site, enabling remote code execution or memory corruption leading to DoS. The connected OpenVAS entry references Microsoft Edge multiple vulnerabilities inc...

CVE-2015-6085

Microsoft Internet Explorer 10 and 11 contain a memory corruption vulnerability tracked as CVE-2015-6085 that can be exploited by visiting a crafted web site to execute remote code or cause a denial of service. The description identifies this as a distinct issue from CVE-2015-6064 and CVE-2015-60...

CVE-2015-6143

CVE-2015-6143 is part of a family of Internet Explorer/Edge memory‑corruption vulnerabilities described for IE11 and Edge. Connected sources reference a memory‑corruption/remote code execution risk via crafted web sites and note Microsoft bulletins (e.g., MS15‑124 for IE11 and MS15‑125 for Edge) ...

CVE-2016-0005

CVE-2016-0005 is an Elevation of Privilege vulnerability in Microsoft Internet Explorer (IE) 9–11. Connected sources confirm it involves bypassing cross-origin/same-origin policy to gain elevated privileges (cross-domain policy enforcement failure). IE versions 9–11 are affected, with the CVE exp...

CVE-2018-0942

CVE-2018-0942: A elevation-of-privilege vulnerability in Internet Explorer on Windows platforms (IE07 zone/integrity handling) allows abuse when viewing crafted content. Affected products include Windows 7 SP1, Server 2008 SPx, Windows 8.1/RT 8.1, Server 2012/R2, Windows 10 1511–1709, and Server ...

CVE-2001-1410

The connected CERT entry for CVE-2001-1410 documents that Internet Explorer window.createPopup() creates chromeless popup windows that can spoof the user interface, enabling phishing-style deception and potential interaction with local files. The vulnerability affects IE 6 and earlier and is miti...

CVE-2002-1262

The CVE-2002-1262 entry concerns Internet Explorer 5.5 and 6.0 failing to enforce security checks on external caching, allowing a remote attacker to read arbitrary files. OpenVAS entries (8910xxxx patches) and CERT details indicate the issue involves caching/reference validation, with potential a...

CVE-2003-0817

CVE-2003-0817 involves Internet Explorer 5.01–6 SP1 and could allow a remote attacker to bypass zone restrictions and read local/arbitrary files via an XML object or through cross‑domain scripting. The vulnerability stems from how IE binds XML content and handles cross‑domain security, potentiall...

CVE-2004-0979

Internet Explorer on Windows XP fails to honor the security setting for “Drag and drop or copy and paste files” when the user selects Disable or Prompt. This weakness can allow drag-and-drop operations to occur contrary to user intent, potentially enabling security-sensitive actions (e.g., copyin...

CVE-2004-1043

CVE-2004-1043 describes a cross-domain vulnerability in the HTML Help ActiveX control (hhctrl.ocx) used by Internet Explorer. If one hhctrl.ocx instance opens a Related Topics window in one domain and another opens content in a different domain with the same window name, the content can run in th...