CVE-2008-0460

CVE-2008-0460 affects MediaWiki up to 1.11.x (and BotQuery extension up to 1.7 and earlier) where an XSS vulnerability in api.php can inject arbitrary script/HTML when viewed in Internet Explorer. The vulnerability impacts multiple legacy MediaWiki versions (1.11 through 1.11.0rc1, 1.10.x, 1.9.x,...

CVE-2008-5554

The CVE-2008-5554 entry describes a vulnerability in Microsoft Internet Explorer 8.0 Beta 2 where the XSS Filter fails to properly handle certain HTTP headers that appear after a CRLF in a URI, permitting bypass of the XSS protection and enabling XSS or redirection via headers such as Location or...

CVE-2010-1175

Microsoft Internet Explorer 7.0 on Windows XP and Windows Server 2003 is affected by CVE-2010-1175. The vulnerability is described as an unspecified impact triggered when processing a crafted XML document that references a specific web site in the SRC attribute of an image element. Affected produ...

CVE-2010-1260

CVE-2010-1260 : In Internet Explorer 8, the IE8 Developer Toolbar could trigger remote code execution when an object was accessed that was either not properly initialized or already deleted, causing memory corruption. Microsoft’s connected advisory MS10-035 describes a cumulative security update ...

CVE-2010-2442

CVE-2010-2442 concerns Microsoft Internet Explorer (noted as IE 8 or similar) where the browser does not properly restrict focus changes, enabling a remote attacker to read keystrokes through cross-domain IFRAME gadgets. The primary affected component is the browser’s handling of focus and cross-...

CVE-2010-3343

CVE-2010-3343 is an HTML Object Memory Corruption vulnerability in Internet Explorer (affecting IE6/IE7/IE8 across supported Windows editions). An attacker could trigger remote code execution by exploiting memory handling of objects that were uninitialized or deleted. Microsoft’s MS10-090 (Securi...

CVE-2010-3345

The connected MS10-090 documentation confirms CVE-2010-3345 is an HTML Element Memory Corruption vulnerability in Internet Explorer 8. It is a remote code execution flaw triggered when IE accesses an object in memory that is uninitialized or has been deleted, exploitable via specially crafted Web...

CVE-2011-1961

The CVE-2011-1961 issue affects Internet Explorer 6–9, where the telnet URI handler does not reliably load telnet.exe, allowing remote code execution when a user opens a crafted HTML/URL (e.g., via SMB-shared content). Exploitation relies on loading a telnet URI and may require user action to vie...

CVE-2011-1963

CVE-2011-1963 refers to a memory corruption flaw in Microsoft Internet Explorer 7–9 related to XSLT processing that can allow remote code execution when a malformed root object is accessed. The root cause is improper handling of memory objects (uninitialized or deleted objects) during a reloading...

CVE-2011-1993

Microsoft Internet Explorer 6–9 contains a memory-corruption vulnerability in handling objects that have been deleted during Scroll event processing, allowing remote code execution when loading a crafted page (CVE-2011-1993). Microsoft released MS11-081 and the cumulative security update 2586448 ...

CVE-2011-2001

Microsoft Internet Explorer 6–9 were vulnerable to a remote code execution via memory corruption in the handling of objects, specifically a logic error in SetExpandedClipRect that could corrupt a vftable pointer in mshtml.dll. Exploitation requires a user to view a malicious page, enabling code e...

CVE-2011-2019

The CVE-2011-2019 entry describes an Untrusted search path vulnerability in Internet Explorer 9 that could allow local privilege escalation via a Trojan DLL loaded from the current working directory. Affected platforms include Windows 7 (Gold/SP1) and Windows Server 2008 R2 and R2 SP1, with IE9 h...

CVE-2012-1522

CVE-2012-1522 concerns Microsoft Internet Explorer 9, where memory object handling allows remote execution of arbitrary code if a deleted object is accessed. This is the Cached Object Remote Code Execution vulnerability. The connected documents indicate this is addressed by the MS12-044 security ...

CVE-2012-4781

CVE-2012-4781 is a Use-After-Free vulnerability in Microsoft Internet Explorer (IE6–IE10) triggered by crafted HTML/JS on a malicious site, enabling remote code execution via access to a deleted object in InjectHTMLStream. Public references note multiple use-after-free variants and credit MS12-07...

CVE-2013-3117

CVE-2013-3122 and CVE-2013-3124 refer to memory-corruption vulnerabilities in Microsoft Internet Explorer 9 exploitable via crafted web sites, enabling remote code execution or denial of service. The connected documents attribute these to Internet Explorer 9 with memory corruption, noting they ar...

CVE-2014-0312

CVE-2014-0312 affects Microsoft Internet Explorer 8–11, where memory corruption can be triggered by a crafted web site, potentially allowing remote code execution or a denial of service. The vulnerability is part of a set of IE memory corruption flaws (CVE-2014-0297, CVE-2014-0308, CVE-2014-0324)...

CVE-2014-1755

CVE-2014-1755 is a memory-corruption vulnerability in Microsoft Internet Explorer 9 that can enable remote code execution via a crafted web site. The issue is part of the broader IE memory-corruption family affecting IE6–IE11 (with IE9 explicitly mentioned in the description). Root cause per the ...

CVE-2014-1815

CVE-2014-1815 concerns memory corruption in Microsoft Internet Explorer versions 6–11 triggered by visiting a crafted web site. The connected documents confirm IE as the affected product and cite a memory-corruption vulnerability that could allow remote code execution or memory corruption-based d...

CVE-2014-2775

CVE-2014-2775 concerns Microsoft Internet Explorer 9–11, described as the “Internet Explorer Memory Corruption Vulnerability.” The connected documents consistently indicate remote code execution or denial of service via a crafted web site, caused by a memory corruption issue in IE’s handling of w...

CVE-2014-4102

Microsoft Internet Explorer 10 and 11 memory-corruption vulnerability (CVE-2014-4102) allows remote code execution or DoS via a crafted web site. Affected: IE 10/11. Underlying issue: memory corruption when processing crafted content. This CVE is distinct from CVE-2014-4080, CVE-2014-4089, and CV...

CVE-2014-6369

CVE-2014-6369 affects Microsoft Internet Explorer 9–11. A use-after-free in handling CTableSection objects enables remote code execution when a user visits a crafted page; public exploits exist and user interaction is typically required. Remediation ties to MS14-080 (KB 3008923) and related IE up...

CVE-2015-0017

Technical details for CVE-2015-0031 are not publicly available in the provided documents. Monitor for updates.

CVE-2015-0068

The connected Nessus/NVD entries describe CVE-2015-0068 as a memory-corruption vulnerability in Internet Explorer 10/11 that can allow remote code execution via a crafted web page. The remediation is Microsoft Security Update MS15-009 (Cumulative Update 3034682) for IE on affected Windows version...

CVE-2015-1623

CVE-2015-1623 affects Microsoft Internet Explorer 11, where a crafted web site can trigger a memory corruption vulnerability, allowing remote code execution or a denial of service. This entry is distinct from CVE-2015-0056 and CVE-2015-1626. The vulnerability is documented as an Internet Explorer...

CVE-2015-1661

CVE-2015-1661 affects Internet Explorer 6–11 and is described as an ASLR bypass vulnerability triggered by visiting a crafted web page. Multiple connected sources corroborate an IE security-bypass/memory-corruption family of issues and tie CVE-2015-1661 to MS15-032 (KB 3038314) as the remediation...

CVE-2015-1714

CVE-2015-1714 – Microsoft Internet Explorer Memory Corruption : A memory-corruption vulnerability in Internet Explorer 10/11 allows remote code execution or denial of service when a user visits a crafted page. Exploitation vectors are described as remote/web-page based, with impact limited to the...

CVE-2015-1739

CVE-2015-1739 is an Internet Explorer Elevation of Privilege vulnerability affecting IE 6–11. A crafted website can allow remote attackers to gain elevated privileges on the affected system. Public exploits exist per multiple sources, and the issue is addressed by Microsoft’s MS15-056 (KB 3058515...

CVE-2015-2450

CVE-2015-2450 and related entry describe a memory-corruption vulnerability in Microsoft Internet Explorer 9–11 that can be triggered by a crafted web site, allowing remote code execution or a memory-corruption-based denial of service. The issue is linked to another CVE (CVE-2015-2451) but is a di...

CVE-2015-2451

CVE-2015-2451 refers to a memory-corruption vulnerability in Microsoft Internet Explorer 9–11 that could allow remote code execution (or memory corruption–related denial of service) when visiting a crafted web site. The vulnerability is a separate issue from CVE-2015-2450 and is listed with a hig...

CVE-2015-6149

CVE-2015-6149 affects Microsoft Internet Explorer 8 and 9. The connected documents describe a memory corruption vulnerability triggered by visiting a crafted web site, allowing remote code execution or a denial of service. The vulnerability is identified as one of two IE memory corruption issues,...

CVE-2015-6150

CVE-2015-6150 is a Microsoft Internet Explorer memory corruption vulnerability (IE 7–11) that attackers can trigger via a crafted web site, potentially allowing remote code execution or a denial of service. The connected documents describe the vulnerability family (memory corruption in IE/Edge) a...

CVE-2015-6164

CVE-2015-6164 affects Microsoft Internet Explorer 9–11. The issue is an improper implementation of the XSS Filter, allowing remote attackers to bypass the Same Origin Policy via a crafted web page. This is described as an XSS Filter Bypass vulnerability. Connected sources indicate public exploits...

CVE-2016-0064

Microsoft Internet Explorer 10 is affected by CVE-2016-0064 (Memory corruption vulnerability). A crafted web page can trigger memory corruption, allowing remote attackers to execute arbitrary code or cause a denial of service. The issue is addressed by MS16-009 (Cumulative Security Update for Int...

CVE-2016-0188

CVE-2016-0188 affects Internet Explorer 11 via the Device Guard UMCI component, enabling a remote attacker to bypass code-signing protections and run unsigned code. The vulnerability stems from UMCI policy validation weaknesses in IE’s User Mode Code Integrity, allowing code that should be blocke...

CVE-1999-0668

The CVE-1999-0668 issue concerns the scriptlet.typelib ActiveX control in Internet Explorer, which is incorrectly marked as safe for scripting and can allow a remote attacker to execute arbitrary commands (as demonstrated by Bubbleboy). The connected CERT/document entries confirm the vulnerabilit...

CVE-1999-1578

CVE-1999-1578 involves a buffer overflow in the Registration Wizard ActiveX control (regwizc.dll, InvokeRegWizard) version 3.0.0.0, used by Internet Explorer 4.01 and 5. The root cause is a buffer overflow in the ActiveX control, which allows remote attackers to execute arbitrary commands. The vu...

CVE-2002-0190

CVE-2002-0190 affects Microsoft Internet Explorer 5.01, 5.5 and 6.0. A malformed web page that requires NetBIOS connectivity can cause Zone Spoofing, allowing remote code execution under fewer security restrictions. OpenVAS entries reference the IE cumulative patch 890923 (MS05-020) as a remediat...

CVE-2003-0115

Microsoft Internet Explorer 5.01, 5.5 and 6.0 are affected by CVE-2003-0115 due to improper validation of parameters during third-party rendering, enabling remote script execution. OpenVAS entries identify the issue as part of the IE cumulative patch set (890923) and MS05-020, with guidance that ...

CVE-2003-0532

Technical details for CVE-2003-0532 are not publicly available in the provided documents. The connected items discuss other Internet Explorer vulnerabilities (not CVE-2003-0532) such as CVE-2003-0838 and HTA-related issues; monitor for updates.

CVE-2004-0979

Internet Explorer on Windows XP fails to honor the security setting for “Drag and drop or copy and paste files” when the user selects Disable or Prompt. This weakness can allow drag-and-drop operations to occur contrary to user intent, potentially enabling security-sensitive actions (e.g., copyin...

CVE-2004-2291

CVE-2004-2291 affects Microsoft Windows Internet Explorer 5.5 and 6.0. A remote attacker can run arbitrary code by delivering an embedded script that uses Shell Helper objects and a shortcut (link) to trigger the target script. No exploitation details are provided in the connected documents. No r...

CVE-2005-0554

CVE-2005-0554 describes a buffer overflow in Internet Explorer’s URL processing logic when handling long hostnames, affecting IE 5.01, 5.5, and 6.0. Public sources (NVD/NIST, CVE listings, and security advisories) identify this as a URL Parsing Memory Corruption Vulnerability that could allow rem...

CVE-2005-2831

CVE-2005-2831 affects Microsoft Internet Explorer 5.01, 5.5 and 6 via a Memory Corruption in the COM object instantiation process when a page embeds certain CLSIDs. An attacker could host a malicious page that causes remote code execution by instantiating COM objects not intended for IE, potentia...

CVE-2005-4717

Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1/SP2, and Windows Server 2003 SP1 is affected. A vulnerability in the rendering path (DIV containing a malformed IMG tag) combined with a malformed CSS/HTML file can trigger a null dereference, causing a remot...

CVE-2006-2766

CVE-2006-2766 describes a Buffer Overflow in MHTML parsing within Windows components that impacts Microsoft Internet Explorer 6 (up to SP2), Windows Explorer, and Outlook Express 6. The vulnerability is triggered by processing a long MHTML URI value in a URL file, allowing remote user-assisted at...

CVE-2006-3227

CVE-2006-3227 describes an interpretation conflict between Internet Explorer and other browsers (e.g., Mozilla/Firefox/Opera) that may let remote attackers alter the visual presentation of web pages and potentially bypass protection mechanisms by using ASCII characters with the 8th bit set. IE ma...

CVE-2006-3605

CVE-2006-3605 : Microsoft Internet Explorer 6 is affected by a DoS vulnerability via the Transition property on an uninitialized DXImageTransform.Microsoft.RevealTrans.1 ActiveX Object, triggering a null dereference and a crash. The description in connected documents confirms a remote denial of s...

CVE-2006-4193

CVE-2006-4193 : Microsoft Internet Explorer 6.0 SP1 (and possibly other versions) may allow remote attackers to cause a denial of service and possibly execute arbitrary code by instantiating COM objects as ActiveX controls, including imskdic.dll (Microsoft IME), chtskdic.dll (Microsoft IME), and ...

CVE-2006-5884

CVE-2006-4777 corresponds to a DirectAnimation ActiveX vulnerability (Daxctle.ocx, KeyFrame method) in Internet Explorer 5.01–6 that enables memory corruption/heap overflow, with exploits referenced by Metasploit module ms06_067_keyframe and multiple sightings (CIRCL, exploit-db). Public material...

CVE-2007-0612

CVE-2007-0612 affects multiple Windows ActiveX controls via mshtml.dll (and TriEditDocument.triedit.dll) where accessing bgColor/fgColor/linkColor/alinkColor/vlinkColor/defaultCharset in various file objects triggers a NULL pointer dereference, causing Internet Explorer denial of service (crash)....