CVE-2011-1992

CVE-2011-1992 describes an information-disclosure vulnerability in the Internet Explorer 8 XSS filter, where a remote attacker could read content from a different domain/zone via a trial-and-error attack. The issue is associated with IE’s XSS Filter Information Disclosure vulnerability, and is ad...

CVE-2012-0168

CVE-2012-0168 affects Microsoft Internet Explorer 6–9 and is described as a Print feature remote code execution flaw. A crafted HTML document during the “Print table of links” operation could allow a user-assisted attacker to execute arbitrary code in the context of the logged-in user. Public det...

CVE-2013-0020

CVE-2013-0020 is a concrete use-after-free vulnerability in Microsoft Internet Explorer 9, related to CMarkup handling (CDATAs) that can be triggered by visiting a crafted page. The root cause involves a dangling pointer being reused after a delete, enabling remote code execution with the user’s ...

CVE-2013-3112

Microsoft Internet Explorer 6–10 contains a memory corruption vulnerability that can be triggered by visiting a crafted web site, allowing remote code execution or a memory-corruption crash. The CVE family covers multiple IDs (CVE-2013-3112, CVE-2013-3113, CVE-2013-3121, CVE-2013-3139, CVE-2013-3...

CVE-2013-3161

CVE-2013-3161 affects Microsoft Internet Explorer 9 and 10. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. The provided documents do not specify the underlying root cause or a published fix/remediation f...

CVE-2014-1784

CVE-2014-1784 corresponds to an Internet Explorer memory corruption issue affecting IE 9–11. The connected documents indicate a vulnerability where remote attackers can cause memory corruption via a crafted web site, potentially enabling arbitrary code execution or a denial of service. The provid...

CVE-2014-1795

CVE-2014-1795 corresponds to a memory-corruption vulnerability in Microsoft Internet Explorer 9–11 that can be triggered by visiting a crafted web site, potentially enabling remote code execution or memory corruption-based denial of service. The connected documents show this family of vulnerabili...

CVE-2014-2754

Microsoft Internet Explorer 9 memory corruption vulnerability CVE-2014-2754 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, and is described as a memory corruption issue distinct from CVE-2014-1774 and CVE-2014-1788. The provided documents do...

CVE-2014-2783

CVE-2014-2783 affects Microsoft Internet Explorer 7–11. Description confirms a security feature bypass: IE fails to prevent the use of wildcard EV SSL certificates, enabling remote attackers to spoof a site’s trust level by exploiting an EV certificate issuance issue. Impact described in sources ...

CVE-2014-4091

CVE-2014-4091 refers to a memory corruption vulnerability in Microsoft Internet Explorer 10 and 11 that allows remote code execution or a DoS via a crafted web site. The CVE is part of a set of IE memory corruption issues (shared context with CVE-2014-4080/4089/4102). Affected product(s): Interne...

CVE-2014-4098

CVE-2014-4098 corresponds to a memory corruption/remote-code-execution vulnerability in Microsoft Internet Explorer 8–11. The Connected documents identify use-after-free flaws in IE components that can be triggered via crafted web content, with several specific sub-vulnerabilities tied to in-memo...

CVE-2015-0051

CVE-2015-0051 is the Internet Explorer ASLR bypass vulnerability affecting IE up to version 11, with IE8 specifically cited in sources. Connected documents confirm this is a security-bypass flaw in IE that can enable code execution through a crafted webpage; MS15-009 patches are the relevant fixe...

CVE-2015-1634

Summary: CVE-2015-1634 affects Microsoft Internet Explorer 6–11. The vulnerability is described as a memory corruption issue that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. It is identified as a distinct vulnerability from CVE-2015-1625....

CVE-2015-6053

CVE-2015-6053 affects Microsoft Internet Explorer (versions 7–11); the vulnerability enables remote info disclosure by passing crafted parameters to ArrayBuffer.slice, allowing memory content exposure from the process. The root cause is unsafe handling of parameters in ArrayBuffer.slice within IE...

CVE-2015-6138

CVE-2015-6138 affects Microsoft Internet Explorer 8–11, where improper handling of HTML attributes in HTTP responses allows remote attackers to bypass the XSS filter. The issue is addressed by the MS15-124 update (December 8, 2015), which patches multiple IE vulnerabilities including this one. Pu...

CVE-2015-6158

CVE-2015-6158 affects Microsoft Edge and Internet Explorer 11. The connected OpenVAS entry links this CVE to Microsoft Security Bulletin MS15-125 and indicates a critical update is needed. The vulnerability involves memory corruption triggered by a crafted web site, enabling remote code execution...

CVE-2018-8126

CVE-2018-8126 is a security feature bypass in Internet Explorer 11 where the component fails to validate User Mode Code Integrity (UMCI) policies, enabling a bypass of security controls. The vulnerability’s impact is described as a high-severity security feature bypass with a CVSS v3 base score o...

CVE-1999-0702

CVE-1999-0702 : Internet Explorer 5.0/5.01 is affected by the Import/Export Favorites vulnerability (ImportExportFavorites). A remote attacker may modify or execute files via this feature. The documentation explicitly links the issue to the Microsoft patch MS99-037 as a remediation. The impact is...

CVE-1999-0793

Technical details about CVE-1999-0793 are not publicly provided in the supplied documents; affected software/version, root cause, and remediation are not specified. Monitor Red Hat/NVD entries for updates.

CVE-1999-0981

CVE-1999-0981 affects Internet Explorer 5.01 and earlier. A remote attacker can create a reference to a client window and use a server-side redirect to access local files via that window (Server-side Page Reference Redirect). Documents confirm the vulnerability description; no exploitation detail...

CVE-2000-0519

CVE-2000-0519 affects Internet Explorer 4.x/5.x. The vulnerability arises because SSL certificates are not properly re-validated when a user starts a new SSL session with the same server within the same IE session, giving partial confidentiality impact. The CVSS v2 base score is 2.6 (LOW). No rem...

CVE-2002-1984

Microsoft Internet Explorer 5.0.1–6.0 on Windows 2000/XP is vulnerable to a denial of service via a crafted OBJECT tag with CLSID:00022613-0000-0000-C000-000000000046. The issue, described across multiple sources (NVD, Red Hat, CVE records), places the root cause in how the CLSID is processed wit...

CVE-2003-0447

The CVE-2003-0447 issue affects Internet Explorer versions 5.01, 5.5 and 6.0, where the Custom HTTP Errors capability can be abused via an argument to shdocvw.dll to generate a javascript: link, enabling remote script execution in the Local Zone. The vulnerability is described as allowing remote ...

CVE-2006-2378

CVE-2006-2378 is a heap-based buffer overflow in the ART Image Rendering component (jgdw400.dll) used by AOL ART images in Microsoft Windows XP (SP1/SP2), Windows Server 2003 (SP1), and older/related OSes (including 98/Me). A crafted ART image can cause heap corruption, enabling remote code execu...

CVE-2006-3280

Microsoft Internet Explorer suffers a cross-domain information disclosure vulnerability (CVE-2006-3280) where an object tag with a data parameter referencing an attacker’s page can cause content to be exposed via the outerHTML attribute due to IE’s cross-domain data access restrictions. The CP ad...

CVE-2006-3591

CVE-2006-3591 affects Microsoft Internet Explorer 6.0. The vulnerability arises when code accesses the URL property of a TriEditDocument.TriEditDocument object before initialization, causing a NULL pointer dereference and an application crash (denial of service). The description consistently stat...

CVE-2006-3659

Microsoft Internet Explorer 6 is affected by CVE-2006-3659. The vulnerability enables remote attackers to cause a denial of service (crash) by setting the location or URL property of a MHTMLFile ActiveX object. The public description across sources consistently states this is a crash/DoS vector i...

CVE-2007-0943

Concretely, CVE-2007-0943 affects Internet Explorer 5.01 and 6 SP1, where parsing malformed CSS strings can trigger memory corruption via out-of-bounds pointers, allowing remote code execution. The incident is associated with an IE CSS parsing memory corruption vulnerability; remediation is MS07-...

CVE-2007-1749

CVE-2007-1749 is a VML/VGX.DLL heap-buffer-overflow remote-code-execution vulnerability in Internet Explorer versions 5.01, 6 and 7 caused by an integer underflow in CDownloadSink::OnDataAvailable when processing compressed VML content. The vulnerability can be triggered by a specially crafted we...

CVE-2008-0078

CVE-2008-0078 describes a remote-code-execution vulnerability in Internet Explorer caused by an Argument Handling Memory Corruption in the ActiveX control dxtmsft.dll (IE 5.01, 6 SP1/SP2, 7). A crafted image on a malicious webpage could allow an attacker to execute arbitrary code with the privile...

CVE-2008-5553

Microsoft Internet Explorer 8.0 Beta 2 contains an XSS Filter vulnerability: the anti-XSS filter disables itself when it encounters a crafted X-XSS-Protection header after a CRLF, allowing remote attackers to bypass the XSS protection and perform XSS. This vulnerability is identified as CVE-2008-...

CVE-2009-2668

Summary: CVE-2009-2668 affects Microsoft Internet Explorer versions 6 up to 6.0.2900.2180 and 7 up to 7.0.6000.16473. The issue is a denial-of-service vulnerability caused by processing XML documents composed of a long sequence of start-tags with no corresponding end-tags, leading to CPU exhausti...

CVE-2009-5159

Invision Power Board (IPB) 2.x–3.0.4 is affected by a cross-site scripting (XSS) vulnerability that can be triggered via a .txt attachment when using Internet Explorer 5. The issue is explicitly described as XSS, but the available documents do not provide deeper details on the root cause beyond t...

CVE-2010-1127

CVE-2010-1127 affects Microsoft Internet Explorer 6 and 7. The vulnerability arises when executing the createElement method, where certain data structures are not initialized, enabling a remote attacker to cause a denial of service via crafted JavaScript. Specifically, setting the (1) outerHTML o...

CVE-2011-1245

CVE-2011-1245 affects Microsoft Internet Explorer 6 and 7. The issue stems from JavaScript access controls failing to properly restrict script access to content from different domains or zones, enabling remote attackers to disclose sensitive information via a crafted page. Affected products: IE 6...

CVE-2011-1246

CVE-2011-1246 affects Microsoft Internet Explorer 8. It arises from improper handling of content settings in HTTP responses, enabling MIME sniffing information disclosure where a remote attacker could obtain sensitive data from a different domain or zone. The vulnerability is associated with IE8’...

CVE-2011-1960

CVE-2011-1960 corresponds to an Information Disclosure vulnerability in Microsoft Internet Explorer 6–9 due to improper handling of JavaScript event handlers, allowing cross-domain/zone access via crafted pages. MS11-057 (Cumulative Security Update for Internet Explorer, 2559049) is the indicated...

CVE-2011-2000

Microsoft Internet Explorer 6–9 is affected by CVE-2011-2000 (Body Element Remote Code Execution Vulnerability). The flaw arises in how IE handles body elements during node swaps: when a call to swapNode occurs on a document with two body nodes, IE frees an attribute field for one body node and l...

CVE-2013-3140

This CVE (CVE-2013-3140) concerns a Use-After-Free in Microsoft Internet Explorer 9. The vulnerability is triggered by visiting a crafted webpage that accesses a deleted CMarkup object, enabling remote code execution. The issue is tied to IE9’s handling of CMarkup, and is documented as a high-sev...

CVE-2013-5051

CVE-2013-5051 affects Microsoft Internet Explorer 10 and 11, allowing a remote attacker to execute arbitrary code or cause a memory corruption-based DoS by visiting a crafted web page. The vulnerability stems from an error in how Internet Explorer accesses an object in memory, enabling remote cod...

CVE-2014-1777

CVE-2014-1777 affects Microsoft Internet Explorer 10 and 11. It enables remote attackers to read local files via a crafted webpage (information disclosure). Public exploits exist. Remediation is to install the June 2014 IE security update (MS14-035; KB2969262 or KB2963950, as applicable), per ven...

CVE-2014-1790

Microsoft Internet Explorer 10 is affected by CVE-2014-1790, a memory-corruption vulnerability that can be triggered by a crafted web site, enabling remote code execution or memory-corruption DoS. Root cause: memory corruption in IE10. Mitigation: apply MS14-035 Security Update for Internet Explo...

CVE-2014-2763

Microsoft Internet Explorer 10 and 11 are affected by CVE-2014-2763 (and related IE memory corruption flaws). A crafted web site can cause memory corruption that may allow remote code execution or a denial of service. The vulnerability is documented as a memory corruption issue in IE 10/11, with ...

CVE-2014-2765

Microsoft Internet Explorer 9–11 is affected by CVE-2014-2765, described as a memory corruption vulnerability exploitable via a crafted web site that could allow remote code execution or cause a denial of service. The vulnerability is identified as the same family as other IE memory corruption CV...

CVE-2014-2772

CVE-2014-2772 concerns Microsoft Internet Explorer 11 memory corruption via a crafted web site, enabling remote code execution or denial of service. Affected software is Internet Explorer 11; root cause is memory corruption in IE11 when processing malicious content from the web. The CVE family is...

CVE-2014-2798

CVE-2014-2798 affects Microsoft Internet Explorer 8–11. The connected Kaspersky advisory KLA10602 lists multiple IE vulnerabilities and explicitly includes CVE-2014-2798 in its CVE list, describing that remote attackers can exploit via a specially crafted web site or URL to gain privileges or exe...

CVE-2014-2800

Microsoft Internet Explorer versions 6–11 are affected by memory corruption vulnerabilities identified as CVE-2014-2800 (and related CVEs 2807/2809). A crafted web site can trigger remote code execution or memory corruption, potentially allowing attacker-controlled actions. Public exploits exist ...

CVE-2014-6323

CVE-2014-6323 affects Microsoft Internet Explorer versions 7–11, allowing remote attackers to obtain sensitive clipboard information via a crafted web page. The root cause is an information-disclosure vulnerability in IE’s handling of clipboard data when loading content from a web page. Public ex...

CVE-2014-6368

Microsoft Internet Explorer 11 contains CVE-2014-6368, an ASLR bypass that lets remote attackers bypass address space layout randomization by luring a user to a crafted web page. Public exploits exist. The affected product is Internet Explorer 11; impact includes partial integrity compromise with...

CVE-2015-0066

CVE-2015-0066 affects Microsoft Internet Explorer 11. The vulnerability is a memory corruption flaw exploitable via a crafted web site, allowing remote code execution or a denial of service. The CIRCL sighting indicates exploitation activity (exploit-db reference 40757) for CVE-2015-0040, and IE ...