CVE-2007-3826

CVE-2007-3826 concerns Microsoft Internet Explorer 7 on Windows XP SP2. The issue enables address-bar spoofing via repeated document.open calls after user navigates to a new page but before onBeforeUnload runs, potentially allowing phishing-style deception. Connected sources identify this as one ...

CVE-2007-1750

CVE-2007-1750 is the CSS Tag Memory Corruption vulnerability in Internet Explorer 6. The issue arises from improper handling of a crafted CSS tag, which can corrupt memory and enable remote code execution when a user views a malicious page. Microsoft’s MS07-033 security update addresses this flaw...

CVE-2008-1545

In this CVE, the affected component is the XMLHttpRequest.setRequestHeader implementation in Microsoft Internet Explorer 7. The issue arises because the method does not restrict the dangerous Transfer-Encoding HTTP header, enabling remote attackers to perform HTTP request splitting and HTTP reque...

CVE-2009-1528

Microsoft Internet Explorer vulnerability CVE-2009-1528 arises from improper synchronization of concurrent asynchronous XMLHttpRequest calls, leading to memory corruption and potential remote code execution. Affected products include IE 6/7 on Windows XP SP2/SP3, IE 6/7 on Server 2003 SP2, and IE...

CVE-2009-3673

Microsoft Internet Explorer 7/8 are affected by CVE-2009-3673 (Uninitialized Memory Corruption). A remote code execution vulnerability exists due to improper handling of memory for objects that are uninitialized or deleted, exploitable via a specially crafted web page and potentially via heap spr...

CVE-2010-3331

CVE-2010-3331 is an Uninitialized Memory Corruption vulnerability in Microsoft Internet Explorer (IE 6–8) triggered by viewing Word documents, where an object not properly initialized or deleted can cause memory corruption and remote code execution. The flaw affects IE’s handling of Word-related ...

CVE-2011-1992

CVE-2011-1992 describes an information-disclosure vulnerability in the Internet Explorer 8 XSS filter, where a remote attacker could read content from a different domain/zone via a trial-and-error attack. The issue is associated with IE’s XSS Filter Information Disclosure vulnerability, and is ad...

CVE-2012-1872

CVE-2012-1872 is an XSS vulnerability in Microsoft Internet Explorer 6–9. The issue arises from crafted EUC-JP-encoded sequences, enabling remote execution of script/HTML. Public docs reference Microsoft Security Update MS12-037 (KB2699988) as the remediation; applying the current IE security upd...

CVE-2013-0024

CVE-2013-0024 is a vulnerability in Microsoft Internet Explorer 8 and 9 described as a pasteHTML Use-After-Free issue. The root cause is the handling of TextRange objects, specifically the use of Range.moveToElementText and Range.collapse , which can leave a dangling pointer that is reused after ...

CVE-2013-0029

Microsoft Internet Explorer 6–9 are affected by CVE-2013-0029 (Internet Explorer CHTML Use After Free). A use-after-free in MSHTML can allow remote code execution via a crafted web page that accesses a deleted object. Microsoft patched this with MS13-009 (Security Update for Internet Explorer, MS...

CVE-2013-1306

CVE-2013-1306 is a Use-After-Free vulnerability in Microsoft Internet Explorer 9 that could allow remote code execution when visiting a crafted site (distinct from CVE-2013-1313). The connected records indicate this issue has been exploited (e.g., Exploit-DB entry 40894) and that Microsoft MS13-0...

CVE-2013-3873

Microsoft Internet Explorer 10 contains a memory corruption vulnerability that allows remote code execution or memory corruption via a crafted web site (CVE-2013-3873). The description cites this as a distinct issue from CVE-2013-3872, CVE-2013-3882, and CVE-2013-3885. The provided documents do n...

CVE-2014-0277

CVE-2014-0277 concerns memory corruption in Microsoft Internet Explorer 8 introduced by crafted webpages that can allow remote code execution or a denial of service. Connected sources describe multiple memory corruption and overflow-style vulnerabilities in Internet Explorer that can be exploited...

CVE-2014-1783

CVE-2014-1783 concerns a memory corruption vulnerability in Microsoft Internet Explorer 9–11 that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. The description in the provided documents confirms IE9–IE11 are affected and that the vulnerabil...

CVE-2014-2766

Summary (supported by provided documents): The CVE-2014-2766 entry concerns Microsoft Internet Explorer versions 9–11. The connected documents reiterate the same class of issue: a memory corruption vulnerability in IE that can be triggered by a crafted web site, enabling remote code execution or ...

CVE-2014-2773

CVE-2014-2773 affects Microsoft Internet Explorer 6–8. It allows remote code execution or memory corruption via a crafted web site, and is a separate issue from CVE-2014-2768. The NVD entry lists a CVSSv2 base score of 9.3 (HIGH) with network attack vector and no user interaction required. The pr...

CVE-2014-2804

CVE-2014-2804 affects Microsoft Internet Explorer 8–11. The vulnerability arises from memory corruption when processing crafted web content, enabling remote code execution or memory corruption via a malicious site. Public exploits exist for this family of IE vulnerabilities, and Kaspersky’s advis...

CVE-2014-4056

Microsoft Internet Explorer 7–10 is affected by CVE-2014-4056, a memory-corruption/Use-After-Free vulnerability in IE that allows remote code execution when a user visits a crafted webpage. The issue is described across multiple sources as a memory corruption in IE (with ZDI-14-283 identifying a ...

CVE-2014-4084

CVE-2014-4084 affects Microsoft Internet Explorer 10 and is described as a memory corruption vulnerability exploitable via a crafted web site, potentially allowing remote code execution or a denial of service. The entry is distinct from CVE-2014-4093. Connected sources corroborate IE10 memory cor...

CVE-2014-4106

CVE-2014-4106 covers a remote code execution/memory corruption vulnerability in Microsoft Internet Explorer (versions 6–11) triggered by a crafted web page. Connected documents (ZDI advisories) detail multiple Use-After-Free flaws in IE components (e.g., CAttrArray, CFieldSetLayout, CTableCell, C...

CVE-2015-0042

CVE-2015-0042 is a memory corruption vulnerability in Microsoft Internet Explorer 9–11 that enables remote code execution or DoS when a user visits a crafted web page. The connected Nessus/IE update entry confirms EA patches: apply Security Update 3034682 (MS15-009). Complete protection requires ...

CVE-2015-1622

Microsoft Internet Explorer 10/11 is affected by a memory corruption vulnerability (CVE-2015-1622) that allows remote code execution via a crafted web page. Exploitation requires visiting a malicious page or file per ZDI-15-255/ ZDI-15-082 advisories, with the vulnerability topic consolidated und...

CVE-2015-1717

Technical details for CVE-2015-1717 are not publicly available in the provided documents. No affected products, root cause, impact, or fixes are stated. Monitor for updates from connected sources.

CVE-2015-6066

CVE-2015-6066 is associated with a memory corruption vulnerability in Microsoft Internet Explorer (IE) versions 7–11 that could allow remote attackers to execute arbitrary code or cause a denial of service via a crafted web page. Connected CNVD entries (CNVD-2015-07537, CNVD-2015-07538, CNVD-2015...

CVE-2015-6071

Microsoft Internet Explorer (versions 7–11) is affected by a memory corruption vulnerability (CVE-2015-6071) that can be triggered by visiting a crafted web page. The issue allows remote code execution or a denial of service and is described across multiple sources as a memory corruption vulnerab...

CVE-2015-6082

CVE-2015-6082 affects Internet Explorer 11. The vulnerability allows remote code execution or memory corruption via a crafted web site in IE11, as described in NVD. The provided documents do not detail a fixed patch within the text, but MS15-112 is listed as a related security bulletin for mitiga...

CVE-2015-6087

Technical details about CVE-2015-6087 are not publicly provided in the supplied documents; CNVD entries reference memory corruption in Internet Explorer but do not disclose affected versions, root cause, or remediation. Monitor for updates.

CVE-1999-0469

CVE-1999-0469 affects Internet Explorer 5.0. The vulnerability is a window spoofing flaw that allows a remote attacker to spoof a legitimate website and capture information from the client. Per the sources, exploitation is remote and the issue has a CVSSv2 base score of 5.0 (Medium) with network ...

CVE-1999-0876

CVE-1999-0876 affecting Microsoft Internet Explorer 4.0, where a buffer overflow is triggered via an EMBED tag. The connected Red Hat and NVD entries reiterate this description. The documented impact indicates complete confidentiality, integrity, and availability compromises with a base score of ...

CVE-2002-0815

The CVE-2002-0815 entry describes a vulnerability in the Javascript Same Origin Policy (SOP) as implemented by Netscape, Mozilla, and Internet Explorer. The root cause is that code running in one frame can access content from a restricted site due to the ability to map the attacker’s parent domai...

CVE-2002-2435

Technical details for CVE-2002-2435 are not provided in the connected documents. Monitor for updates.

CVE-2003-0513

Microsoft Internet Explorer is affected by CVE-2003-0513 through a cookie path-traversal issue. The root cause is that encoded directory traversal sequences ("%2e%2e") in a URL can bypass cookie scope restrictions, causing the browser to send cookies outside the intended URL subset to another app...

CVE-2006-2094

Affected software: Internet Explorer prior to Windows XP SP2 and Windows Server 2003 SP1. Vulnerability summary: When Prompt is enabled in Security Settings, IE uses modal dialogs to verify running an ActiveX control or other risky actions. This enables user-assisted remote attackers to exploit a...

CVE-2006-2385

CVE-2006-2385 is an MHT memory corruption vulnerability in Internet Explorer (IE 5.01 SP4 and IE 6 SP1 and earlier). A crafted Web page could cause memory corruption when a user saves it as a multipart HTML file (*.mht), potentially enabling remote code execution. The exploit requires user intera...

CVE-2006-3354

Microsoft Internet Explorer 6 is affected by CVE-2006-3354. A vulnerability in the ADODB.Recordset ActiveX object’s Filter property can cause a denial of service (crash) when values are set multiple times, triggering a null dereference. Affected: IE6; vulnerable component: ADODB.Recordset ActiveX...

CVE-2006-3638

CVE-2006-3638 (COM Object Instantiation Memory Corruption) affects Microsoft Internet Explorer (notably IE 5.01/6) via instantiation of COM objects not intended for IE, leading to remote code execution and potential memory corruption. The vulnerability arises when the browser instantiates certain...

CVE-2006-6956

CVE-2006-6956 affects Microsoft Internet Explorer. The vulnerability arises when a web page contains a large number of nested marquee tags, which can cause a remote denial-of-service crash. Connected sources confirm the DoS impact linked to the marquee nesting issue (related to CVE-2006-2723). Th...

CVE-2007-1094

CVE-2007-1094 affects Microsoft Internet Explorer 7. A memory corruption/NULL dereference vulnerability is triggered by crafted JavaScript in onUnload handlers that modify the document structure, leading to denial of service. The issue involves an unspecified error in handling onUnload and docume...

CVE-2007-3092

CVE-2007-3092 affects Microsoft Internet Explorer 6. The vulnerability allows remote attackers to spoof the URL bar and page properties (including SSL certificates) by interrupting page loading with certain uses of location DOM objects and setTimeout calls, enabling phishing-like attacks. Exploit...

CVE-2007-3893

CVE-2007-3893 involves a remote code execution vulnerability in Internet Explorer 5.01–7 caused by memory corruption from an unhandled error during certain operations. Exploitation requires a user to view a crafted Web page, with remote attackers potentially gaining the same privileges as the log...

CVE-2007-3924

CVE-2007-3924 describes an argument-injection vulnerability in Internet Explorer when Netscape is installed and certain URIs are registered. The issue arises from IE not properly delimiting the URL argument when invoking Netscape, allowing remote attackers to perform cross-browser scripting and e...

CVE-2008-2949

CVE-2008-2949 describes a cross-domain vulnerability in Internet Explorer 6 and 7 where the attacker could manipulate the window.location object using a String to observe events across domains. The root cause is the incorrect determination of the origin of web script, enabling potential viewing o...

CVE-2009-0076

CVE-2009-0076 affects Microsoft Internet Explorer 7 under XHTML strict mode, allowing remote code execution via a malformed CSS stylesheet in a crafted HTML document (CSS Memory Corruption). The connected MSRC/MSKB data (MS09-002) confirms this vulnerability and describes a cumulative security up...

CVE-2010-2560

CVE-2010-2560 : A remote code execution vulnerability in Microsoft Internet Explorer (IE6, IE7, IE8) caused by memory handling: accessing objects that are uninitialized or deleted can trigger memory corruption. Affects IE on various Windows platforms; exploitation could allow arbitrary code execu...

CVE-2010-3326

CVE-2010-3326 is an Uninitialized Memory Corruption vulnerability in Microsoft Internet Explorer (IE6/7/8 on Windows platforms). The issue arises when IE accesses an object that has not been initialized or has been deleted, potentially allowing remote code execution with the caller’s privileges. ...

CVE-2011-0036

Microsoft Internet Explorer 6–8 contains a dangling pointer/memory corruption vulnerability in mshtml.dll triggered by certain object handling, allowing remote code execution. Connected advisories identify MS11-003 as the patch to mitigate this issue; exploitation details are discussed by VUPEN (...

CVE-2011-0038

The CVE-2011-0038 issue is an untrusted search path/ insecure DLL loading vulnerability in Microsoft Internet Explorer 8 (IE8) related to IESHIMS.DLL. Multiple connected advisories (MS11-003/MS11-003; CPAI-2011-053) describe remote code execution when a user is enticed to place a malicious DLL on...

CVE-2011-1244

The CVE-2011-1244 entry concerns Microsoft Internet Explorer 6, 7, and 8, where cross-domain content access restrictions are not enforced, enabling remote attackers to read sensitive information or perform clickjacking via a crafted page. The vulnerability is associated with the Frame Tag Informa...

CVE-2011-1997

CVE-2011-1997 corresponds to a memory corruption vulnerability in Microsoft Internet Explorer where an OnLoad event handler mishandles references to deleted objects, allowing remote code execution via a crafted webpage. The issue affects Internet Explorer versions discussed in the connected advis...

CVE-2013-1307

CVE-2013-1307 is a use-after-free vulnerability in Microsoft Internet Explorer 8 and 9. A crafted webpage that triggers access to a deleted object could allow remote code execution in the current user context. This entry is distinct from CVE-2013-0811. Public references indicate exploitation stat...