CVE-2007-0612

CVE-2007-0612 affects multiple Windows ActiveX controls via mshtml.dll (and TriEditDocument.triedit.dll) where accessing bgColor/fgColor/linkColor/alinkColor/vlinkColor/defaultCharset in various file objects triggers a NULL pointer dereference, causing Internet Explorer denial of service (crash)....

CVE-2007-3481

CVE-2007-3481 concerns a cross-domain issue in Microsoft Internet Explorer 6 and 7 where a remote attacker could bypass the Same Origin Policy by a JavaScript action that overwrites the document variable and statically sets the document.domain attribute. The connected PT-security entry confirms a...

CVE-2007-3826

CVE-2007-3826 concerns Microsoft Internet Explorer 7 on Windows XP SP2. The issue enables address-bar spoofing via repeated document.open calls after user navigates to a new page but before onBeforeUnload runs, potentially allowing phishing-style deception. Connected sources identify this as one ...

CVE-2007-4478

CVE-2007-4478 affects Microsoft Internet Explorer 6.0 and 7. An XSS vulnerability occurs when a user saves a page to a local file; the URI string and the document’s content can lead to execution of arbitrary script in the local zone. Connected sources describe saving a URL containing a crafted UR...

CVE-2008-5555

CVE-2008-5555 refers to a vulnerability in Microsoft Internet Explorer 8.0 Beta 2 where XDomainRequestAllowed is used to authorize cross-domain data exchange. The underlying issue is an XSS filter bypass caused by injecting this header after a CRLF sequence, enabling remote attackers to perform X...

CVE-2008-5750

CVE-2008-5750 concerns an argument-injection vulnerability in Microsoft Internet Explorer 8 beta 2 running on Windows XP SP3. The issue allows a remote attacker to execute arbitrary commands via the --renderer-path option in a chromehtml: URI, effectively enabling arbitrary code execution under t...

CVE-2009-0369

Microsoft Internet Explorer 7 is affected by a Clickjacking vulnerability (CVE-2009-0369). The issue arises when an onclick action moves a crafted element to the current mouse position, allowing remote attackers to trick a user into visiting an arbitrary URL. Connected sources corroborate the vul...

CVE-2009-4074

CVE-2009-4074 affects Internet Explorer 8’s XSS Filter (response-changing mechanism) enabling cross-site scripting on sites with no inherent vulnerabilities. Connected MS release MS10-002 documents a cumulative IE update to fix vulnerabilities that could allow remote code execution when viewing c...

CVE-2012-4782

CVE-2012-4782 describes a use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 that allows remote code execution when a crafted webpage triggers access to a deleted object in CMarkup. Connected sources confirm this family of IE vulnerabilities; the related Microsoft MS12-077 secur...

CVE-2013-0024

CVE-2013-0024 is a vulnerability in Microsoft Internet Explorer 8 and 9 described as a pasteHTML Use-After-Free issue. The root cause is the handling of TextRange objects, specifically the use of Range.moveToElementText and Range.collapse , which can leave a dangling pointer that is reused after ...

CVE-2013-3119

CVE-2013-3119 affects Microsoft Internet Explorer 9 and 10, where a crafted web site can trigger memory corruption, allowing remote code execution or a denial of service. The NVD entry and related records describe this as a high-severity memory corruption vulnerability (base score 9.3). The issue...

CVE-2013-3190

CVE-2013-3190 affects Microsoft Internet Explorer 8–10. The public description and connected records show remote code execution and memory corruption via a crafted Web page, impacting IE on Windows platforms of that era (notably IE8–10 on Windows XP/Vista/Server 2003/2008 variants). The vulnerabi...

CVE-2013-5052

CVE-2013-5052 is a memory-corruption vulnerability in Microsoft Internet Explorer that can enable remote code execution when a user views a crafted webpage. The provided documents indicate the issue affects Internet Explorer across multiple versions (notably IE7, with broader mentions of IE6–IE8 ...

CVE-2014-0268

Microsoft Internet Explorer 8–11 is affected by CVE-2014-0268, an elevation-of-privilege vulnerability where IE fails to properly restrict file installation and registry-key creation, allowing remote attackers to bypass Mandatory Integrity Control via a crafted web site. Affected products: Intern...

CVE-2014-0273

CVE-2014-0273 relates to memory corruption in Microsoft Internet Explorer 9–11 triggered by visiting a crafted web site. The linked sources confirm IE 9–11 are affected by memory corruption vulnerabilities with remote code execution potential, and Microsoft issued a security update (MS14-010) to ...

CVE-2014-0276

CVE-2014-0276 is an Internet Explorer memory-corruption vulnerability affecting Internet Explorer 8 and 9. It allows remote code execution via a crafted web page due to a memory-management/allocator issue, with public exploits known. The issue is addressed by the MS14-010 (Cumulative Security Upd...

CVE-2014-2808

Microsoft Internet Explorer 10/11 is affected by CVE-2014-2808 (Memory Corruption Vulnerability). A crafted web site can remotely execute arbitrary code or cause a denial of service via memory corruption. The vulnerability is part of a family of IE memory corruption vulnerabilities and relates to...

CVE-2014-2813

Microsoft Internet Explorer 9–11 contains a memory corruption vulnerability (CVE-2014-2813) exploitable via a crafted web site; multiple sources identify this alongside CVE-2014-2786 and CVE-2014-2792. Affected product: IE 9–11. Impact: remote code execution or memory corruption. Public exploits ...

CVE-2014-2827

CVE-2014-2827 affects Microsoft Internet Explorer (IE) 6–11. The vulnerability involves memory corruption triggered by a crafted web site, enabling remote code execution or, per description, a denial of service. In the provided sources, this is described as the same-class issue alongside other IE...

CVE-2014-4095

CVE-2014-4095 /related Internet Explorer 11 memory corruption issues described by multiple ZDI advisories (e.g., ZDI-14-309, ZDI-14-322, ZDI-14-319, ZDI-14-307). The common factor is remote code execution or memory corruption in IE11 when processing crafted pages or files. Exploitation generally ...

CVE-2014-4103

CVE-2014-4103 maps to multiple Internet Explorer UAF-based remote code execution advisories from ZDI (e.g., ZDI-14-306, -308, -317, -315, -312, -316, -318, -314, -313). Affected component families include CAttrArray, CFieldSetLayout, CTableCell, CTable, CDataBindTask, CMarkup, CGeneratedTreeNode,...

CVE-2014-6353

CVE-2014-6353 affects Microsoft Internet Explorer versions 6–10. The vulnerability is a memory-corruption flaw triggered by visiting a specially crafted web page, allowing remote attackers to execute arbitrary code or cause a denial of service. Public sources (e.g., NVD entry) describe remote cod...

CVE-2014-6365

CVE-2014-6365 affects Microsoft Internet Explorer 8–11 and describes a vulnerability where an attacker can bypass the built-in XSS filter by crafting a specific attribute in an HTML element. The root cause is a XSS filter bypass in IE’s HTML parsing/attribute handling. The CVE entry notes this as...

CVE-2015-0055

Technical details about CVE-2015-0055 are not provided in the supplied documents. Public disclosures exist generally, but here specifics (affected components, exploit path, remediation) are not present; monitor for updates.

CVE-2015-1627

CVE-2015-1627 is an Internet Explorer elevation-of-privilege vulnerability affecting IE 7–11. A crafted web page can cause IE to elevate privileges due to an error in how permissions are validated, enabling an attacker to gain higher privileges on the vulnerable system. Public disclosures relate ...

CVE-2015-1709

Microsoft Internet Explorer 7–11 is affected by CVE-2015-1709, a remote memory-corruption vulnerability that can enable arbitrary code execution via a crafted web site. The issue is documented across multiple sources (CVE entry and CNVD), with the vulnerable component being Internet Explorer itse...

CVE-2015-1712

CVE-2015-1712 is a memory corruption vulnerability in Microsoft Internet Explorer 8 and 9 that can allow remote code execution or a denial of service via a crafted web site. The issue is described consistently across NVD entries and CNVD mirrors (IE memory corruption vulnerability) and is distinc...

CVE-2015-1713

CVE-2015-1713 affects Microsoft Internet Explorer (IE) 6–11, with remote elevation of privilege via a crafted web site (IE11 explicitly noted). Root cause and impact described as privilege escalation; exploitation details are not provided in the supplied documents. Remediation: apply the Microsof...

CVE-2015-2389

Summary of findings: CVE-2015-2389 affects Microsoft Internet Explorer 10 and 11. The vulnerability is a memory corruption issue triggered by visiting a crafted website, enabling remote code execution or a denial of service. The issue is part of a set of IE memory corruption vulnerabilities from ...

CVE-2015-2448

CVE-2015-2448 affects Microsoft Internet Explorer 9 and 10, where a memory corruption vulnerability could allow remote code execution via a crafted web page. The issue is addressed by the MS15-079 update (KB3082442), which is a cumulative security update for Internet Explorer. Public exploits exi...

CVE-2015-6066

CVE-2015-6066 is associated with a memory corruption vulnerability in Microsoft Internet Explorer (IE) versions 7–11 that could allow remote attackers to execute arbitrary code or cause a denial of service via a crafted web page. Connected CNVD entries (CNVD-2015-07537, CNVD-2015-07538, CNVD-2015...

CVE-2015-6162

Technical details for CVE-2015-6162 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2016-0105

Summary of CVE-2016-0105 details (IE/Edge): A memory corruption vulnerability in Microsoft Internet Explorer 9–11 and Microsoft Edge that can be triggered by a crafted web site, potentially allowing remote code execution or a denial of service. Connected CNVD entries corroborate the surface: affe...

CVE-2016-3243

CVE-2016-3243 affects Microsoft Internet Explorer 10 and 11. The vulnerability arises from improper handling of memory objects, enabling remote attackers to execute arbitrary code or cause a denial of service (memory corruption) by convincing a user to view a crafted site. Public sources consiste...

CVE-2016-3261

CVE-2016-3261 is an Information Disclosure vulnerability in Internet Explorer 11. It arises when IE11 improperly handles page content in memory, enabling remote attackers to obtain sensitive information via a crafted web site or web content. Public disclosures and Microsoft’s MS16-084 security up...

CVE-2017-8651

CVE-2017-8651 is an Internet Explorer memory corruption vulnerability affecting Internet Explorer on Windows Server 2008 SP2 and Windows Server 2012. It allows remote code execution by improperly accessing objects in memory; exploitation typically requires a user to view a specially crafted webpa...

CVE-1999-0280

CVE-1999-0280: Remote command execution in Microsoft Internet Explorer via crafted .lnk and .url files. Affected software: Internet Explorer. Root cause: loading or processing of .lnk/.url shortcuts can execute arbitrary commands with the user’s privileges. Documented across multiple sources (NVD...

CVE-1999-0468

CVE-1999-0468: Internet Explorer 5.0 allows a remote server to read arbitrary files on the client’s file system via the Microsoft Scriptlet Component. Reported impact per CVSS suggests confidentiality loss (C:H) and overall HIGH severity (8.2) per CVSS v3.1, with network access and no user intera...

CVE-2000-0028

The vulnerability affects Internet Explorer versions 5.0 through 5.01. It allows remote attackers to bypass the cross-frame security policy and read local files via the external.NavigateAndFind function. The root cause is the ability to bypass cross-frame restrictions through NavigateAndFind, ena...

CVE-2000-0061

CVE-2000-0061 affects Internet Explorer 5. The vulnerability: during window loading, the document’s security zone is not updated until after loading, permitting a remote attacker to execute JavaScript in a different security context while the page is loading. The record indicates a maximum CVSS v...

CVE-2003-0114

The CVE-2003-0114 entry affects Microsoft Internet Explorer 5.01, 5.5 and 6.0, where the file upload control can be abused by a malicious page to automatically upload files from the user’s local system via script. OpenVAS details corroborate IE 5.01/5.5/6.0 exposure and rate the impact as remote ...

CVE-2003-0531

CVE-2003-0531 maps to a vulnerability in Internet Explorer (IE) 5.01 SP3 through 6.0 SP1 where crafted Content-Type and Content-Disposition headers enable a remote attacker to access and execute script in the My Computer zone via the browser cache. The underlying flaw is IE’s handling of these he...

CVE-2003-0815

CVE-2003-0815 concerns cross-domain vulnerabilities in Internet Explorer 6 SP1 and earlier. The connected OpenVAS and NVD entries describe three CAN-2003-0814/0815/0816 variants (ExecCommand, Function Pointer Override, Script URL) that could bypass the browser’s cross-domain security model, enabl...

CVE-2003-1028

CVE-2003-1028 : The vulnerability lies in the download function of Internet Explorer 6 SP1, where an HTTP response with an invalid Content-Type and a .htm file can disclose the cache directory name. This information disclosure could allow remote attackers to bypass security measures that rely on ...

CVE-2004-2011

The CVE-2004-2011 entry concerns msxml3.dll in Internet Explorer 6 (IE 6.0.2600.0). The vulnerability is triggered when a remote user sends a crafted URL containing a single & (ampersand) in a link, causing a parsing error that can crash the process. Affected component: msxml3.dll; vulnerable be...

CVE-2005-0054

CVE-2005-0054 is a remote-code-execution vulnerability in Internet Explorer 5.01/5.5/6 where specially crafted HTML/URLs cause IE to interpret a page in the wrong security zone, potentially executing code in the Local Machine zone. The issue stems from how encoded hostnames are parsed for URLs, e...

CVE-2005-0055

CVE-2005-0055 concerns a remote code execution vulnerability in Internet Explorer 5.01, 5.5, and 6, caused by improper buffer validation when handling certain DHTML methods (notably createControlRange). Exploitation requires a user to view a malicious Web page or HTML email; the attacker gains th...

CVE-2005-2087

CVE-2005-2087 affects Internet Explorer on Windows, via the JView Profiler (Javaprxy.dll) COM object. The vulnerability is a heap overflow when the COM object is instantiated from a crafted web page, potentially allowing arbitrary code execution or a crash in the user’s context. Exploitation requ...

CVE-2006-0799

The provided connected documents confirm a vulnerability in Microsoft Internet Explorer (CVE-2006-0799) where an attacker can spoof a legitimate URL in the status bar to facilitate phishing via a crafted page containing an anchor, a form pointing to a malicious URL, and an INPUT submit control st...

CVE-2006-1188

CVE-2006-1188 is a memory corruption vulnerability in Microsoft Internet Explorer 6 (IE6) when handling HTML elements with a specially crafted tag, enabling remote code execution. Exploitation targets IE6 SP2 on Windows platforms (notably XP SP2/Win2K SP4 variants). The issue is addressed by Micr...