CVE-2014-2758

CVE-2014-2758 affects Microsoft Internet Explorer 9–11 and is described as allowing remote code execution or memory corruption via a crafted web site. The vulnerability is labeled as the same family as other IE memory corruption issues (e.g., CVE-2014-2758 is cited alongside CVE-2014-2759, CVE-20...

CVE-2014-4091

CVE-2014-4091 refers to a memory corruption vulnerability in Microsoft Internet Explorer 10 and 11 that allows remote code execution or a DoS via a crafted web site. The CVE is part of a set of IE memory corruption issues (shared context with CVE-2014-4080/4089/4102). Affected product(s): Interne...

CVE-2014-4111

CVE-2014-4111 corresponds to a memory corruption vulnerability in Microsoft Internet Explorer (IE) 6–11 that enables remote code execution via a crafted web page. Connected advisories (ZDI-14-306, -14-308, -14-317, -14-315, -14-312, -14-316, -14-318, -14-314, -14-313, SECURITYVULNS:VULN:13956) de...

CVE-2014-6330

CVE-2014-6330 affects Microsoft Internet Explorer 9 and is a memory-corruption vulnerability that can allow remote code execution via a crafted web page. The issue is due to IE processing certain web content leading to memory corruption. Affected product: Internet Explorer 9 (and IE versions unde...

CVE-2015-0022

CVE-2015-0031 affects Microsoft Internet Explorer 6–11. The vulnerability is a memory corruption issue triggered by accessing an object that is uninitialized or deleted via a crafted web page, enabling remote code execution or potentially DoS. The connected Nessus entry MS15-009 (and CPAI advisor...

CVE-2015-0028

CVE-2015-0028 affects Internet Explorer 9. The supplied connected data identifies a memory corruption vulnerability in IE9 that can be triggered via a crafted web site, enabling remote code execution or a denial of service. The issue is part of a broader set of memory‑corruption IE vulnerabilitie...

CVE-2015-0029

CVE-2015-0029 refers to a remote memory-corruption vulnerability in Microsoft Internet Explorer (versions 6–11) that can allow arbitrary code execution or a denial of service when a user visits a crafted webpage. The underlying issue is described as an error in how IE accesses an object that is n...

CVE-2015-0041

CVE-2015-0041 affects Microsoft Internet Explorer 6–11. The vulnerability allows remote code execution or a denial of service (memory corruption) when a user visits a crafted web page. Affected product: Internet Explorer; impact as stated is memory corruption enabling code execution. Remediation ...

CVE-2015-0044

CVE-2015-0050 (and closely related CVEs like CVE-2015-0044) affect Microsoft Internet Explorer 8/9 via a memory corruption vulnerability when visiting crafted sites. The CIRCL entry notes exploitation and links to Exploit DB (exploits/40841) for CVE-2015-0050, confirming in-the-wild relevance. Th...

CVE-2015-0045

CVE-2015-0045 targets Microsoft Internet Explorer versions 6–8 and involves a memory corruption vulnerability that can be triggered by visiting a crafted web site, allowing remote code execution or denial of service. The associated Nessus plugin (MS15-009) and CVE family context confirm IE memory...

CVE-2015-0070

CVE-2015-0070 applies to Internet Explorer versions 6–11 and describes a cross-domain information-disclosure vulnerability. A crafted web page can cause IE to reveal content from a different domain/zone, enabling remote information disclosure. Public exploits exist. Mitigation is via MS15-009 sec...

CVE-2015-1704

CVE-2015-1704 affects Microsoft Internet Explorer 6–11. It is an Elevation of Privilege vulnerability exploitable via a crafted webpage hosted by a remote attacker, allowing privilege escalation on the affected IE versions. Connected documents (NVD/CNVD) confirm the same description and note this...

CVE-2015-1718

CVE-2015-1718 relates to Microsoft Internet Explorer 11 memory corruption triggered by a crafted web page. Connected CNVD entries describe an unspecified memory corruption vulnerability in IE that could allow remote code execution or crash the browser, but they do not provide product-version spec...

CVE-2015-6069

Microsoft Internet Explorer 8–11 contains a memory corruption vulnerability that can be triggered by a crafted web site, allowing remote code execution or a denial of service. Affected software is IE 8–11; root cause described as memory corruption. Connected sources (CNVD-2015-07545, CNVD-2015-07...

CVE-2015-6075

Microsoft Internet Explorer 11 is affected by a memory corruption vulnerability that allows remote code execution or denial of service via a crafted website. Descriptions in the supplied sources confirm IE11 as the vulnerable component and memory corruption as the underlying issue, with the impac...

CVE-2015-6138

CVE-2015-6138 affects Microsoft Internet Explorer 8–11, where improper handling of HTML attributes in HTTP responses allows remote attackers to bypass the XSS filter. The issue is addressed by the MS15-124 update (December 8, 2015), which patches multiple IE vulnerabilities including this one. Pu...

CVE-2016-0110

CVE-2016-0110 affects Microsoft Internet Explorer 10–11 and Microsoft Edge. Root cause: memory corruption due to improper memory handling (e.g., mismatched array copy/object access) when processing crafted web content, leading to remote code execution or memory corruption. Impact: remote attacker...

CVE-2016-0113

CVE-2016-0113 affects Microsoft Internet Explorer 9–11 (and related entry context links to Edge in some sources). The connected documents indicate a memory corruption vulnerability exploitable by remote attackers via a crafted web site, leading to arbitrary code execution or a denial of service. ...

CVE-2016-3291

CVE-2016-3291 affects Microsoft Internet Explorer 11 and Microsoft Edge through mishandling of cross-origin requests, enabling information disclosure via a crafted web page. The root cause is incorrect handling of cross-origin resources in the affected browsers, allowing remote attackers to obtai...

CVE-2018-8113

CVE-2018-8113 is a security feature bypass affecting Internet Explorer 11, described as bypassing Mark of the Web (MOTW) tagging. The connected records (NVD, CNVD, CVE lists) confirm the same vulnerability description and scope, with no explicit exploit details or in-the-wild activity provided. T...

CVE-1999-1110

The CVE-1999-1110 vulnerability concerns the Windows Media Player ActiveX control as used in Internet Explorer 5.0. The ActiveX object reportedly returns a specific error code when a referenced file does not exist, enabling remote websites to determine whether a file exists on the client. The pro...

CVE-2000-0160

The vulnerability CVE-2000-0160 affects the Microsoft Active Setup ActiveX component used by Internet Explorer 4.x–5.x. A remote attacker can install software components without user prompts by spoofing the software manufacturer's identity as Microsoft. Exploitation details or in-the-wild status ...

CVE-2000-0266

The CVE-2000-0266 entry describes a vulnerability in Internet Explorer 5.01 where a malicious applet can bypass the cross-frame security policy by interacting with the Java JSObject to modify DOM properties, allowing an IFRAME to load an arbitrary JavaScript URL. This reveals a client-side cross-...

CVE-2000-0329

The CVE concerns a Microsoft ActiveX control vulnerability in the Active Setup Control that allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML email. Affected component is an ActiveX control; impact is remote code execution with partia...

CVE-2002-1444

The CVE-2002-1444 entry concerns Google Toolbar 1.1.60 running in Internet Explorer 5.5/6.0. Affected component: Google Toolbar HTML/ActiveX handling. Root cause: the vulnerability enables remote attackers to cause a denial of service (crash) through malicious HTML, with possible involvement of s...

CVE-2003-1041

CVE-2003-1041 is a showHelp/HTML Help vulnerability in Internet Explorer 5.x/6.0 where a remote attacker could run arbitrary code via a crafted showHelp URL or a malicious HTML Help link. The underlying issue is improper validation/processing of CHM files, enabling remote code execution in the Lo...

CVE-2004-0216

CVE-2004-0216 is an Install Engine vulnerability in Internet Explorer (inseng.dll) affecting IE 5.01, 5.5, and 6. It enables remote code execution when a user opens a malicious website or HTML email containing a long CAB file name, triggering an integer/buffer length overflow in the Install Engin...

CVE-2004-0566

CVE-2004-0566 describes a remote code execution vulnerability in Internet Explorer caused by an integer overflow in the BMP image handling (imgbmp.cxx). An attacker can exploit this by delivering a malicious BMP with a large bfOffBits value, potentially compromising the affected system when a use...

CVE-2005-3312

CVE-2005-3312 is the IE HTML rendering issue where HTML/JS could be executed when viewing image files (GIF/JPG/WAV) with misleading content-type; connected records describe related disclosures (YaBB before 2.1, Drupal 4.5.x/4.6.x, Invision Gallery 2.0.3) stating that an attacker could leverage HT...

CVE-2006-7065

CVE-2006-7065 affects Microsoft Internet Explorer (mshtml.dll). A crafted IFRAME referencing a particular XML file and XSL stylesheet can trigger a crash in mshtml.dll when a refresh occurs, described as probably a null pointer dereference. The issue is documented across Red Hat and NVD/CVE sourc...

CVE-2007-0219

CVE-2007-0219 affects Microsoft Internet Explorer 5.01/6/7 via COM objects instantiated as ActiveX controls. The vulnerability arises when IE tries to instantiate COM objects (not intended for IE) such as those in Imjpcksid.dll, Htmlmm.ocx, and Blnmgrps.dll, leading to remote code execution. Open...

CVE-2007-3041

CVE-2007-3041 describes a remote code execution vulnerability in the Internet Explorer ActiveX object pdwizard.ocx (used by IE 5.01, 6 SP1, and 7). The flaw is an unspecified memory corruption issue in the ActiveX control that could be triggered by a specially crafted web page, allowing an attack...

CVE-2008-2259

The CVE-2008-2259 entry refers to a set of memory corruption/argument-validation issues in Microsoft Internet Explorer 6 and 7 during print preview, described as the HTML Component Handling Vulnerability. Affected products are IE 6.x and IE 7.x on Windows; the underlying cause is improper validat...

CVE-2008-3472

CVE-2008-3472 affects Microsoft Internet Explorer 6 and 7, part of a set of cross-domain vulnerabilities (HTML Element Cross-Domain, Event Handling Cross-Domain, Cross-Domain Information Disclosure, Uninitialized Memory Corruption, and HTML Objects Memory Corruption). The issues allow remote code...

CVE-2008-3473

CVE-2008-3473 and related cross-domain IE vulnerabilities affect Internet Explorer 6/7. Root cause: IE’s incorrect handling of the origin domain/zone for web script (Event Handling Cross-Domain and related) enables remote code execution or information disclosure across domains/zones. Affected: IE...

CVE-2008-5552

The provided documents identify CVE-2008-5552 as a vulnerability in Microsoft Internet Explorer 8.0 Beta 2 where the XSS Filter can be bypassed, enabling remote XSS attacks. The issue arises from a CRLF sequence combined with a crafted Content-Type header, demonstrated with a utf-7 charset value....

CVE-2008-5553

Microsoft Internet Explorer 8.0 Beta 2 contains an XSS Filter vulnerability: the anti-XSS filter disables itself when it encounters a crafted X-XSS-Protection header after a CRLF, allowing remote attackers to bypass the XSS protection and perform XSS. This vulnerability is identified as CVE-2008-...

CVE-2009-2350

Technical details about CVE-2009-2350 are not provided in the connected documents; available content only notes that Internet Explorer 6 and earlier are vulnerable to javascript: Refresh header XSS. Monitor for updates.

CVE-2009-2668

Summary: CVE-2009-2668 affects Microsoft Internet Explorer versions 6 up to 6.0.2900.2180 and 7 up to 7.0.6000.16473. The issue is a denial-of-service vulnerability caused by processing XML documents composed of a long sequence of start-tags with no corresponding end-tags, leading to CPU exhausti...

CVE-2009-2954

The CVE-2009-2954 issue affects Microsoft Internet Explorer 6.0.2900.2180 and earlier, where long JavaScript strings for location.hash can trigger a denial-of-service (CPU consumption and application hang). The vulnerability is tied to the handling of the window.location.hash property in IE, lead...

CVE-2009-3003

CVE-2009-3003 affects Microsoft Internet Explorer 6–8. The vulnerability arises when a page opens a relative URI via window.open, allowing an attacker to spoof the address bar and display an arbitrary URL on the site visited by the victim, potentially triggering a spoofed login form for that site...

CVE-2010-2118

Microsoft Internet Explorer vulnerable components: Internet Explorer 6.0.2900.2180 and 8.0.7600.16385. Root cause: JavaScript code that loops indefinitely to create IFRAMEs for invalid news:// URIs, triggering a denial of service through resource consumption. Affected product surfaces are browser...

CVE-2010-5071

Affected software: Microsoft Internet Explorer 8.0 and earlier. The vulnerability arises in JavaScript’s getComputedStyle, where the returned object’s value set is not properly restricted, enabling remote attackers to disclose sensitive information about visited pages. Consequence: information di...

CVE-2011-1245

CVE-2011-1245 affects Microsoft Internet Explorer 6 and 7. The issue stems from JavaScript access controls failing to properly restrict script access to content from different domains or zones, enabling remote attackers to disclose sensitive information via a crafted page. Affected products: IE 6...

CVE-2011-1262

CVE-2011-1262 affects Microsoft Internet Explorer 7–9. The flaw arises in how IE handles HTTP 302 redirects to CDL protocols, where a reference counter for a transaction object can be corrupted, causing a use-after-free that enables remote code execution. The vulnerability is described as memory ...

CVE-2011-1347

Microsoft Internet Explorer 8 on Windows 7 is affected by a Protected Mode bypass vulnerability (CVE-2011-1347) that allowed an attacker to create arbitrary files by leveraging access to a Low integrity process, demonstrated during Pwn2Own 2011 by Stephen Fewer as the third of three chained vulne...

CVE-2011-1713

CVE-2011-1713 affects Microsoft msxml.dll as used by Internet Explorer 8 on Windows 7, allowing remote attackers to obtain potentially sensitive heap-address information via an XML document using the XSLT generate-id() function. The primary impact described is information disclosure of heap addre...

CVE-2012-0169

The CVE-2012-0169 entry affects Microsoft Internet Explorer 9. The vulnerability arises from how IE9 handles in-memory objects, allowing remote code execution when a deleted object is accessed. Exploitation could enable arbitrary code execution in the context of the current user, with network-bas...

CVE-2013-0028

CVE-2013-0028 is a Use-After-Free in Microsoft Internet Explorer (IE6–IE9) that allows remote code execution when a user visits a crafted page. The flaw is in handling of CObjectElement objects and misuse of URL references in CSS cursor properties, producing a dangling pointer that can be exploit...

CVE-2013-1338

Microsoft Internet Explorer 6–10 is affected by use-after-free vulnerabilities (CVE-2013-1303, CVE-2013-1304, CVE-2013-1338) that allow remote code execution when visiting a crafted site that accesses deleted objects. The issues stem from use-after-free conditions in IE components (notably relate...