CVE-2006-3280

Microsoft Internet Explorer suffers a cross-domain information disclosure vulnerability (CVE-2006-3280) where an object tag with a data parameter referencing an attacker’s page can cause content to be exposed via the outerHTML attribute due to IE’s cross-domain data access restrictions. The CP ad...

CVE-2007-0219

CVE-2007-0219 affects Microsoft Internet Explorer 5.01/6/7 via COM objects instantiated as ActiveX controls. The vulnerability arises when IE tries to instantiate COM objects (not intended for IE) such as those in Imjpcksid.dll, Htmlmm.ocx, and Blnmgrps.dll, leading to remote code execution. Open...

CVE-2007-3041

CVE-2007-3041 describes a remote code execution vulnerability in the Internet Explorer ActiveX object pdwizard.ocx (used by IE 5.01, 6 SP1, and 7). The flaw is an unspecified memory corruption issue in the ActiveX control that could be triggered by a specially crafted web page, allowing an attack...

CVE-2008-1086

The CVE-2008-1086 issue concerns the hxvz.dll ActiveX control (HxTocCtrl) used by Microsoft Help 2.5 and exposed in Internet Explorer on Windows XP SP2, Server 2003 SP1/SP2, Vista SP1, and Server 2008. The vulnerability is a memory corruption flaw triggered by malformed arguments to the ActiveX c...

CVE-2008-2255

Microsoft Internet Explorer 5.01, 6, and 7 suffer a memory corruption vulnerability (uninitialized memory) that can lead to a denial of service and remote code execution via unknown vectors. The connected advisories associate CVE-2008-2255 with MS08-045 (Cumulative Security Update for Internet Ex...

CVE-2009-2350

Technical details about CVE-2009-2350 are not provided in the connected documents; available content only notes that Internet Explorer 6 and earlier are vulnerable to javascript: Refresh header XSS. Monitor for updates.

CVE-2009-2655

CVE-2009-2655 describes a denial-of-service vulnerability in mshtml.dll used by Microsoft Internet Explorer 7/8 on Windows XP SP3. The issue is triggered when the JavaScript findText method is called with a crafted Unicode string in the first argument and only one additional argument (e.g., a sec...

CVE-2009-2954

The CVE-2009-2954 issue affects Microsoft Internet Explorer 6.0.2900.2180 and earlier, where long JavaScript strings for location.hash can trigger a denial-of-service (CPU consumption and application hang). The vulnerability is tied to the handling of the window.location.hash property in IE, lead...

CVE-2010-2118

Microsoft Internet Explorer vulnerable components: Internet Explorer 6.0.2900.2180 and 8.0.7600.16385. Root cause: JavaScript code that loops indefinitely to create IFRAMEs for invalid news:// URIs, triggering a denial of service through resource consumption. Affected product surfaces are browser...

CVE-2011-1713

CVE-2011-1713 affects Microsoft msxml.dll as used by Internet Explorer 8 on Windows 7, allowing remote attackers to obtain potentially sensitive heap-address information via an XML document using the XSLT generate-id() function. The primary impact described is information disclosure of heap addre...

CVE-2011-2000

Microsoft Internet Explorer 6–9 is affected by CVE-2011-2000 (Body Element Remote Code Execution Vulnerability). The flaw arises in how IE handles body elements during node swaps: when a call to swapNode occurs on a document with two body nodes, IE frees an attribute field for one body node and l...

CVE-2012-0168

CVE-2012-0168 affects Microsoft Internet Explorer 6–9 and is described as a Print feature remote code execution flaw. A crafted HTML document during the “Print table of links” operation could allow a user-assisted attacker to execute arbitrary code in the context of the logged-in user. Public det...

CVE-2013-0020

CVE-2013-0020 is a concrete use-after-free vulnerability in Microsoft Internet Explorer 9, related to CMarkup handling (CDATAs) that can be triggered by visiting a crafted page. The root cause involves a dangling pointer being reused after a delete, enabling remote code execution with the user’s ...

CVE-2013-3161

CVE-2013-3161 affects Microsoft Internet Explorer 9 and 10. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. The provided documents do not specify the underlying root cause or a published fix/remediation f...

CVE-2014-1784

CVE-2014-1784 corresponds to an Internet Explorer memory corruption issue affecting IE 9–11. The connected documents indicate a vulnerability where remote attackers can cause memory corruption via a crafted web site, potentially enabling arbitrary code execution or a denial of service. The provid...

CVE-2014-1795

CVE-2014-1795 corresponds to a memory-corruption vulnerability in Microsoft Internet Explorer 9–11 that can be triggered by visiting a crafted web site, potentially enabling remote code execution or memory corruption-based denial of service. The connected documents show this family of vulnerabili...

CVE-2014-2754

Microsoft Internet Explorer 9 memory corruption vulnerability CVE-2014-2754 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, and is described as a memory corruption issue distinct from CVE-2014-1774 and CVE-2014-1788. The provided documents do...

CVE-2014-2763

Microsoft Internet Explorer 10 and 11 are affected by CVE-2014-2763 (and related IE memory corruption flaws). A crafted web site can cause memory corruption that may allow remote code execution or a denial of service. The vulnerability is documented as a memory corruption issue in IE 10/11, with ...

CVE-2014-2772

CVE-2014-2772 concerns Microsoft Internet Explorer 11 memory corruption via a crafted web site, enabling remote code execution or denial of service. Affected software is Internet Explorer 11; root cause is memory corruption in IE11 when processing malicious content from the web. The CVE family is...

CVE-2014-2783

CVE-2014-2783 affects Microsoft Internet Explorer 7–11. Description confirms a security feature bypass: IE fails to prevent the use of wildcard EV SSL certificates, enabling remote attackers to spoof a site’s trust level by exploiting an EV certificate issuance issue. Impact described in sources ...

CVE-2014-2791

CVE-2014-2791 affects Microsoft Internet Explorer (notably IE 9) and is a remote memory-corruption vulnerability triggered via a crafted web site. The issue allows remote code execution or memory corruption leading to a potential denial of service when a user visits a malicious page. Several conn...

CVE-2014-2800

Microsoft Internet Explorer versions 6–11 are affected by memory corruption vulnerabilities identified as CVE-2014-2800 (and related CVEs 2807/2809). A crafted web site can trigger remote code execution or memory corruption, potentially allowing attacker-controlled actions. Public exploits exist ...

CVE-2014-4091

CVE-2014-4091 refers to a memory corruption vulnerability in Microsoft Internet Explorer 10 and 11 that allows remote code execution or a DoS via a crafted web site. The CVE is part of a set of IE memory corruption issues (shared context with CVE-2014-4080/4089/4102). Affected product(s): Interne...

CVE-2015-0051

CVE-2015-0051 is the Internet Explorer ASLR bypass vulnerability affecting IE up to version 11, with IE8 specifically cited in sources. Connected documents confirm this is a security-bypass flaw in IE that can enable code execution through a crafted webpage; MS15-009 patches are the relevant fixe...

CVE-2015-1634

Summary: CVE-2015-1634 affects Microsoft Internet Explorer 6–11. The vulnerability is described as a memory corruption issue that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. It is identified as a distinct vulnerability from CVE-2015-1625....

CVE-2015-1753

Microsoft Internet Explorer 11 is affected by a memory corruption vulnerability exploitable via a crafted web site, potentially allowing remote code execution or a denial of service. The CVE-2015-1753 entry is part of a set of related IE11 memory corruption vulnerabilities (distinct from CVE-2015...

CVE-2015-6053

CVE-2015-6053 affects Microsoft Internet Explorer (versions 7–11); the vulnerability enables remote info disclosure by passing crafted parameters to ArrayBuffer.slice, allowing memory content exposure from the process. The root cause is unsafe handling of parameters in ArrayBuffer.slice within IE...

CVE-2016-0108

CVE-2016-0108 affects Microsoft Internet Explorer 11 with a memory corruption vulnerability that allows remote code execution via a crafted web site. Root cause cited in CNVD CNVD-2016-01576/01577/01589 and NVD entries is improper handling of memory objects in IE11; exploitation is evidenced by a...

CVE-2018-8113

CVE-2018-8113 is a security feature bypass affecting Internet Explorer 11, described as bypassing Mark of the Web (MOTW) tagging. The connected records (NVD, CNVD, CVE lists) confirm the same vulnerability description and scope, with no explicit exploit details or in-the-wild activity provided. T...

CVE-1999-0669

The CVE-1999-0669 entry documents a flaw in the Eyedog ActiveX control used with Internet Explorer, where marking the control as “safe for scripting” enables a remote attacker to run arbitrary commands. The vulnerability description, consistent across the NVD and Red Hat/CVE records, cites Bubble...

CVE-1999-0793

Technical details about CVE-1999-0793 are not publicly provided in the supplied documents; affected software/version, root cause, and remediation are not specified. Monitor Red Hat/NVD entries for updates.

CVE-1999-0981

CVE-1999-0981 affects Internet Explorer 5.01 and earlier. A remote attacker can create a reference to a client window and use a server-side redirect to access local files via that window (Server-side Page Reference Redirect). Documents confirm the vulnerability description; no exploitation detail...

CVE-2000-0519

CVE-2000-0519 affects Internet Explorer 4.x/5.x. The vulnerability arises because SSL certificates are not properly re-validated when a user starts a new SSL session with the same server within the same IE session, giving partial confidentiality impact. The CVSS v2 base score is 2.6 (LOW). No rem...

CVE-2002-1984

Microsoft Internet Explorer 5.0.1–6.0 on Windows 2000/XP is vulnerable to a denial of service via a crafted OBJECT tag with CLSID:00022613-0000-0000-C000-000000000046. The issue, described across multiple sources (NVD, Red Hat, CVE records), places the root cause in how the CLSID is processed wit...

CVE-2003-0447

The CVE-2003-0447 issue affects Internet Explorer versions 5.01, 5.5 and 6.0, where the Custom HTTP Errors capability can be abused via an argument to shdocvw.dll to generate a javascript: link, enabling remote script execution in the Local Zone. The vulnerability is described as allowing remote ...

CVE-2004-0719

The CVE-2004-0719 frame-injection vulnerability affects Internet Explorer on Windows (IE6 on XP) and IE for Mac 5.2.3, arising from insufficient protection against framing content across domains, enabling content injection and potential site spoofing. Exploitation details are not fully provided i...

CVE-2006-3659

Microsoft Internet Explorer 6 is affected by CVE-2006-3659. The vulnerability enables remote attackers to cause a denial of service (crash) by setting the location or URL property of a MHTMLFile ActiveX object. The public description across sources consistently states this is a crash/DoS vector i...

CVE-2007-0943

Concretely, CVE-2007-0943 affects Internet Explorer 5.01 and 6 SP1, where parsing malformed CSS strings can trigger memory corruption via out-of-bounds pointers, allowing remote code execution. The incident is associated with an IE CSS parsing memory corruption vulnerability; remediation is MS07-...

CVE-2007-1749

CVE-2007-1749 is a VML/VGX.DLL heap-buffer-overflow remote-code-execution vulnerability in Internet Explorer versions 5.01, 6 and 7 caused by an integer underflow in CDownloadSink::OnDataAvailable when processing compressed VML content. The vulnerability can be triggered by a specially crafted we...

CVE-2008-0078

CVE-2008-0078 describes a remote-code-execution vulnerability in Internet Explorer caused by an Argument Handling Memory Corruption in the ActiveX control dxtmsft.dll (IE 5.01, 6 SP1/SP2, 7). A crafted image on a malicious webpage could allow an attacker to execute arbitrary code with the privile...

CVE-2008-5553

Microsoft Internet Explorer 8.0 Beta 2 contains an XSS Filter vulnerability: the anti-XSS filter disables itself when it encounters a crafted X-XSS-Protection header after a CRLF, allowing remote attackers to bypass the XSS protection and perform XSS. This vulnerability is identified as CVE-2008-...

CVE-2009-2668

Summary: CVE-2009-2668 affects Microsoft Internet Explorer versions 6 up to 6.0.2900.2180 and 7 up to 7.0.6000.16473. The issue is a denial-of-service vulnerability caused by processing XML documents composed of a long sequence of start-tags with no corresponding end-tags, leading to CPU exhausti...

CVE-2009-5159

Invision Power Board (IPB) 2.x–3.0.4 is affected by a cross-site scripting (XSS) vulnerability that can be triggered via a .txt attachment when using Internet Explorer 5. The issue is explicitly described as XSS, but the available documents do not provide deeper details on the root cause beyond t...

CVE-2010-1127

CVE-2010-1127 affects Microsoft Internet Explorer 6 and 7. The vulnerability arises when executing the createElement method, where certain data structures are not initialized, enabling a remote attacker to cause a denial of service via crafted JavaScript. Specifically, setting the (1) outerHTML o...

CVE-2010-2557

CVE-2010-2557 is an Internet Explorer 6 memory-corruption vulnerability (Uninitialized Memory Corruption) where an object that is not properly initialized or is deleted can be exploited by a crafted web page to execute arbitrary code remotely. The issue is part of a family of IE flaws disclosed i...

CVE-2010-3342

CVE-2010-3342 affects Microsoft Internet Explorer 6–8, where the browser may render cached HTML content that comes from a different domain/zone via script, enabling cross-domain information disclosure. The issue is documented alongside CVE-2010-3348 (another cross-domain disclosure) and is mitiga...

CVE-2011-1245

CVE-2011-1245 affects Microsoft Internet Explorer 6 and 7. The issue stems from JavaScript access controls failing to properly restrict script access to content from different domains or zones, enabling remote attackers to disclose sensitive information via a crafted page. Affected products: IE 6...

CVE-2011-1246

CVE-2011-1246 affects Microsoft Internet Explorer 8. It arises from improper handling of content settings in HTTP responses, enabling MIME sniffing information disclosure where a remote attacker could obtain sensitive data from a different domain or zone. The vulnerability is associated with IE8’...

CVE-2011-1960

CVE-2011-1960 corresponds to an Information Disclosure vulnerability in Microsoft Internet Explorer 6–9 due to improper handling of JavaScript event handlers, allowing cross-domain/zone access via crafted pages. MS11-057 (Cumulative Security Update for Internet Explorer, 2559049) is the indicated...

CVE-2013-3113

Microsoft Internet Explorer 6–10 was affected by memory-corruption vulnerabilities leading to remote code execution or DoS via crafted web content (CVE-2013-3112/3113/3121/3139/3142). The issues affect IE6–IE10 and are tied to a memory corruption flaw described as the 'Internet Explorer Memory Co...