CVE-2005-2831

CVE-2005-2831 affects Microsoft Internet Explorer 5.01, 5.5 and 6 via a Memory Corruption in the COM object instantiation process when a page embeds certain CLSIDs. An attacker could host a malicious page that causes remote code execution by instantiating COM objects not intended for IE, potentia...

CVE-2005-4717

Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1/SP2, and Windows Server 2003 SP1 is affected. A vulnerability in the rendering path (DIV containing a malformed IMG tag) combined with a malformed CSS/HTML file can trigger a null dereference, causing a remot...

CVE-2006-1188

CVE-2006-1188 is a memory corruption vulnerability in Microsoft Internet Explorer 6 (IE6) when handling HTML elements with a specially crafted tag, enabling remote code execution. Exploitation targets IE6 SP2 on Windows platforms (notably XP SP2/Win2K SP4 variants). The issue is addressed by Micr...

CVE-2006-2766

CVE-2006-2766 describes a Buffer Overflow in MHTML parsing within Windows components that impacts Microsoft Internet Explorer 6 (up to SP2), Windows Explorer, and Outlook Express 6. The vulnerability is triggered by processing a long MHTML URI value in a URL file, allowing remote user-assisted at...

CVE-2006-3227

CVE-2006-3227 describes an interpretation conflict between Internet Explorer and other browsers (e.g., Mozilla/Firefox/Opera) that may let remote attackers alter the visual presentation of web pages and potentially bypass protection mechanisms by using ASCII characters with the 8th bit set. IE ma...

CVE-2006-4193

CVE-2006-4193 : Microsoft Internet Explorer 6.0 SP1 (and possibly other versions) may allow remote attackers to cause a denial of service and possibly execute arbitrary code by instantiating COM objects as ActiveX controls, including imskdic.dll (Microsoft IME), chtskdic.dll (Microsoft IME), and ...

CVE-2006-5884

CVE-2006-4777 corresponds to a DirectAnimation ActiveX vulnerability (Daxctle.ocx, KeyFrame method) in Internet Explorer 5.01–6 that enables memory corruption/heap overflow, with exploits referenced by Metasploit module ms06_067_keyframe and multiple sightings (CIRCL, exploit-db). Public material...

CVE-2007-0612

CVE-2007-0612 affects multiple Windows ActiveX controls via mshtml.dll (and TriEditDocument.triedit.dll) where accessing bgColor/fgColor/linkColor/alinkColor/vlinkColor/defaultCharset in various file objects triggers a NULL pointer dereference, causing Internet Explorer denial of service (crash)....

CVE-2007-3481

CVE-2007-3481 concerns a cross-domain issue in Microsoft Internet Explorer 6 and 7 where a remote attacker could bypass the Same Origin Policy by a JavaScript action that overwrites the document variable and statically sets the document.domain attribute. The connected PT-security entry confirms a...

CVE-2007-3826

CVE-2007-3826 concerns Microsoft Internet Explorer 7 on Windows XP SP2. The issue enables address-bar spoofing via repeated document.open calls after user navigates to a new page but before onBeforeUnload runs, potentially allowing phishing-style deception. Connected sources identify this as one ...

CVE-2008-5555

CVE-2008-5555 refers to a vulnerability in Microsoft Internet Explorer 8.0 Beta 2 where XDomainRequestAllowed is used to authorize cross-domain data exchange. The underlying issue is an XSS filter bypass caused by injecting this header after a CRLF sequence, enabling remote attackers to perform X...

CVE-2008-5750

CVE-2008-5750 concerns an argument-injection vulnerability in Microsoft Internet Explorer 8 beta 2 running on Windows XP SP3. The issue allows a remote attacker to execute arbitrary commands via the --renderer-path option in a chromehtml: URI, effectively enabling arbitrary code execution under t...

CVE-2009-0369

Microsoft Internet Explorer 7 is affected by a Clickjacking vulnerability (CVE-2009-0369). The issue arises when an onclick action moves a crafted element to the current mouse position, allowing remote attackers to trick a user into visiting an arbitrary URL. Connected sources corroborate the vul...

CVE-2009-4074

CVE-2009-4074 affects Internet Explorer 8’s XSS Filter (response-changing mechanism) enabling cross-site scripting on sites with no inherent vulnerabilities. Connected MS release MS10-002 documents a cumulative IE update to fix vulnerabilities that could allow remote code execution when viewing c...

CVE-2010-3331

CVE-2010-3331 is an Uninitialized Memory Corruption vulnerability in Microsoft Internet Explorer (IE 6–8) triggered by viewing Word documents, where an object not properly initialized or deleted can cause memory corruption and remote code execution. The flaw affects IE’s handling of Word-related ...

CVE-2012-4782

CVE-2012-4782 describes a use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 that allows remote code execution when a crafted webpage triggers access to a deleted object in CMarkup. Connected sources confirm this family of IE vulnerabilities; the related Microsoft MS12-077 secur...

CVE-2013-0024

CVE-2013-0024 is a vulnerability in Microsoft Internet Explorer 8 and 9 described as a pasteHTML Use-After-Free issue. The root cause is the handling of TextRange objects, specifically the use of Range.moveToElementText and Range.collapse , which can leave a dangling pointer that is reused after ...

CVE-2013-3119

CVE-2013-3119 affects Microsoft Internet Explorer 9 and 10, where a crafted web site can trigger memory corruption, allowing remote code execution or a denial of service. The NVD entry and related records describe this as a high-severity memory corruption vulnerability (base score 9.3). The issue...

CVE-2013-3190

CVE-2013-3190 affects Microsoft Internet Explorer 8–10. The public description and connected records show remote code execution and memory corruption via a crafted Web page, impacting IE on Windows platforms of that era (notably IE8–10 on Windows XP/Vista/Server 2003/2008 variants). The vulnerabi...

CVE-2013-5052

CVE-2013-5052 is a memory-corruption vulnerability in Microsoft Internet Explorer that can enable remote code execution when a user views a crafted webpage. The provided documents indicate the issue affects Internet Explorer across multiple versions (notably IE7, with broader mentions of IE6–IE8 ...

CVE-2014-0268

Microsoft Internet Explorer 8–11 is affected by CVE-2014-0268, an elevation-of-privilege vulnerability where IE fails to properly restrict file installation and registry-key creation, allowing remote attackers to bypass Mandatory Integrity Control via a crafted web site. Affected products: Intern...

CVE-2014-0273

CVE-2014-0273 relates to memory corruption in Microsoft Internet Explorer 9–11 triggered by visiting a crafted web site. The linked sources confirm IE 9–11 are affected by memory corruption vulnerabilities with remote code execution potential, and Microsoft issued a security update (MS14-010) to ...

CVE-2014-0276

CVE-2014-0276 is an Internet Explorer memory-corruption vulnerability affecting Internet Explorer 8 and 9. It allows remote code execution via a crafted web page due to a memory-management/allocator issue, with public exploits known. The issue is addressed by the MS14-010 (Cumulative Security Upd...

CVE-2014-2766

Summary (supported by provided documents): The CVE-2014-2766 entry concerns Microsoft Internet Explorer versions 9–11. The connected documents reiterate the same class of issue: a memory corruption vulnerability in IE that can be triggered by a crafted web site, enabling remote code execution or ...

CVE-2014-2808

Microsoft Internet Explorer 10/11 is affected by CVE-2014-2808 (Memory Corruption Vulnerability). A crafted web site can remotely execute arbitrary code or cause a denial of service via memory corruption. The vulnerability is part of a family of IE memory corruption vulnerabilities and relates to...

CVE-2014-2813

Microsoft Internet Explorer 9–11 contains a memory corruption vulnerability (CVE-2014-2813) exploitable via a crafted web site; multiple sources identify this alongside CVE-2014-2786 and CVE-2014-2792. Affected product: IE 9–11. Impact: remote code execution or memory corruption. Public exploits ...

CVE-2014-2827

CVE-2014-2827 affects Microsoft Internet Explorer (IE) 6–11. The vulnerability involves memory corruption triggered by a crafted web site, enabling remote code execution or, per description, a denial of service. In the provided sources, this is described as the same-class issue alongside other IE...

CVE-2014-4095

CVE-2014-4095 /related Internet Explorer 11 memory corruption issues described by multiple ZDI advisories (e.g., ZDI-14-309, ZDI-14-322, ZDI-14-319, ZDI-14-307). The common factor is remote code execution or memory corruption in IE11 when processing crafted pages or files. Exploitation generally ...

CVE-2014-4103

CVE-2014-4103 maps to multiple Internet Explorer UAF-based remote code execution advisories from ZDI (e.g., ZDI-14-306, -308, -317, -315, -312, -316, -318, -314, -313). Affected component families include CAttrArray, CFieldSetLayout, CTableCell, CTable, CDataBindTask, CMarkup, CGeneratedTreeNode,...

CVE-2014-6353

CVE-2014-6353 affects Microsoft Internet Explorer versions 6–10. The vulnerability is a memory-corruption flaw triggered by visiting a specially crafted web page, allowing remote attackers to execute arbitrary code or cause a denial of service. Public sources (e.g., NVD entry) describe remote cod...

CVE-2014-6365

CVE-2014-6365 affects Microsoft Internet Explorer 8–11 and describes a vulnerability where an attacker can bypass the built-in XSS filter by crafting a specific attribute in an HTML element. The root cause is a XSS filter bypass in IE’s HTML parsing/attribute handling. The CVE entry notes this as...

CVE-2015-0055

Technical details about CVE-2015-0055 are not provided in the supplied documents. Public disclosures exist generally, but here specifics (affected components, exploit path, remediation) are not present; monitor for updates.

CVE-2015-1627

CVE-2015-1627 is an Internet Explorer elevation-of-privilege vulnerability affecting IE 7–11. A crafted web page can cause IE to elevate privileges due to an error in how permissions are validated, enabling an attacker to gain higher privileges on the vulnerable system. Public disclosures relate ...

CVE-2015-1712

CVE-2015-1712 is a memory corruption vulnerability in Microsoft Internet Explorer 8 and 9 that can allow remote code execution or a denial of service via a crafted web site. The issue is described consistently across NVD entries and CNVD mirrors (IE memory corruption vulnerability) and is distinc...

CVE-2015-1713

CVE-2015-1713 affects Microsoft Internet Explorer (IE) 6–11, with remote elevation of privilege via a crafted web site (IE11 explicitly noted). Root cause and impact described as privilege escalation; exploitation details are not provided in the supplied documents. Remediation: apply the Microsof...

CVE-2015-2389

Summary of findings: CVE-2015-2389 affects Microsoft Internet Explorer 10 and 11. The vulnerability is a memory corruption issue triggered by visiting a crafted website, enabling remote code execution or a denial of service. The issue is part of a set of IE memory corruption vulnerabilities from ...

CVE-2015-2448

CVE-2015-2448 affects Microsoft Internet Explorer 9 and 10, where a memory corruption vulnerability could allow remote code execution via a crafted web page. The issue is addressed by the MS15-079 update (KB3082442), which is a cumulative security update for Internet Explorer. Public exploits exi...

CVE-2015-6066

CVE-2015-6066 is associated with a memory corruption vulnerability in Microsoft Internet Explorer (IE) versions 7–11 that could allow remote attackers to execute arbitrary code or cause a denial of service via a crafted web page. Connected CNVD entries (CNVD-2015-07537, CNVD-2015-07538, CNVD-2015...

CVE-2015-6162

Technical details for CVE-2015-6162 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2016-0105

Summary of CVE-2016-0105 details (IE/Edge): A memory corruption vulnerability in Microsoft Internet Explorer 9–11 and Microsoft Edge that can be triggered by a crafted web site, potentially allowing remote code execution or a denial of service. Connected CNVD entries corroborate the surface: affe...

CVE-2016-3243

CVE-2016-3243 affects Microsoft Internet Explorer 10 and 11. The vulnerability arises from improper handling of memory objects, enabling remote attackers to execute arbitrary code or cause a denial of service (memory corruption) by convincing a user to view a crafted site. Public sources consiste...

CVE-2017-8651

CVE-2017-8651 is an Internet Explorer memory corruption vulnerability affecting Internet Explorer on Windows Server 2008 SP2 and Windows Server 2012. It allows remote code execution by improperly accessing objects in memory; exploitation typically requires a user to view a specially crafted webpa...

CVE-1999-0280

CVE-1999-0280: Remote command execution in Microsoft Internet Explorer via crafted .lnk and .url files. Affected software: Internet Explorer. Root cause: loading or processing of .lnk/.url shortcuts can execute arbitrary commands with the user’s privileges. Documented across multiple sources (NVD...

CVE-2000-0061

CVE-2000-0061 affects Internet Explorer 5. The vulnerability: during window loading, the document’s security zone is not updated until after loading, permitting a remote attacker to execute JavaScript in a different security context while the page is loading. The record indicates a maximum CVSS v...

CVE-2002-2435

Technical details for CVE-2002-2435 are not provided in the connected documents. Monitor for updates.

CVE-2003-0114

The CVE-2003-0114 entry affects Microsoft Internet Explorer 5.01, 5.5 and 6.0, where the file upload control can be abused by a malicious page to automatically upload files from the user’s local system via script. OpenVAS details corroborate IE 5.01/5.5/6.0 exposure and rate the impact as remote ...

CVE-2003-0531

CVE-2003-0531 maps to a vulnerability in Internet Explorer (IE) 5.01 SP3 through 6.0 SP1 where crafted Content-Type and Content-Disposition headers enable a remote attacker to access and execute script in the My Computer zone via the browser cache. The underlying flaw is IE’s handling of these he...

CVE-2003-0815

CVE-2003-0815 concerns cross-domain vulnerabilities in Internet Explorer 6 SP1 and earlier. The connected OpenVAS and NVD entries describe three CAN-2003-0814/0815/0816 variants (ExecCommand, Function Pointer Override, Script URL) that could bypass the browser’s cross-domain security model, enabl...

CVE-2003-1028

CVE-2003-1028 : The vulnerability lies in the download function of Internet Explorer 6 SP1, where an HTTP response with an invalid Content-Type and a .htm file can disclose the cache directory name. This information disclosure could allow remote attackers to bypass security measures that rely on ...

CVE-2004-2011

The CVE-2004-2011 entry concerns msxml3.dll in Internet Explorer 6 (IE 6.0.2600.0). The vulnerability is triggered when a remote user sends a crafted URL containing a single & (ampersand) in a link, causing a parsing error that can crash the process. Affected component: msxml3.dll; vulnerable be...