CVE-2011-0347

This CVE (CVE-2011-0347) corresponds to a high-severity vulnerability in Microsoft Internet Explorer on Windows XP, involving an incorrect GUI display triggered via DOM-related vectors (cross_fuzz). The OpenVAS entries group this under a Windows Shell/IE flaw (MS11-006) with a CVSS v2 base score ...

CVE-2011-1251

CVE-2011-1251 refers to a memory handling flaw in Microsoft Internet Explorer 8 (DOM Manipulation Memory Corruption). The vulnerability arises when IE processes DOM objects that are uninitialized or already deleted, enabling remote code execution if a user views a malicious page. Public details a...

CVE-2011-1960

CVE-2011-1960 corresponds to an Information Disclosure vulnerability in Microsoft Internet Explorer 6–9 due to improper handling of JavaScript event handlers, allowing cross-domain/zone access via crafted pages. MS11-057 (Cumulative Security Update for Internet Explorer, 2559049) is the indicated...

CVE-2012-4775

Microsoft Internet Explorer 9 is affected by CVE-2012-4775 (CTreeNode Use After Free Vulnerability). The issue is a use-after-free in IE’s memory handling when accessing objects that were not properly initialized or already deleted (CTreeNode/CTreePos/CTreeNode-related code paths), leading to pot...

CVE-2013-3871

CVE-2013-3871 corresponds to multiple remote code execution/memory corruption vulnerabilities in Microsoft Internet Explorer (IE) 6–10, triggered by viewing a crafted website. Connected sources (MS13-088) describe an in-memory object access flaw in IE that could allow code execution under the use...

CVE-2013-3909

CVE-2013-3909 affects Microsoft Internet Explorer 6–8. An attacker can read content from a different domain/zone via crafted CSS token sequences, enabling remote information disclosure. The issue is addressed by Microsoft Security Bulletin MS13-088 and corresponding patches. The vulnerability sch...

CVE-2014-1779

CVE-2014-1779 describes a memory corruption vulnerability in Microsoft Internet Explorer (IE6–IE11) that is triggered by a crafted web page. The connected document provides technical context: the issue is identified as a Use-After-Free (UAF) in the browser’s memory management, with exploitation d...

CVE-2014-1800

CVE-2014-1800 is a remote code execution flaw in Microsoft Internet Explorer 6–11. The vulnerability arises from how IE handles an object that has not been correctly initialized or has been deleted, enabling memory corruption when a user visits a crafted webpage. Public exploitation exists, and a...

CVE-2014-2756

Technical details for CVE-2014-2756 are not publicly available in the provided documents. Monitor for updates.

CVE-2014-2785

CVE-2014-2785 affects Microsoft Internet Explorer (notably IE7) where a crafted webpage can trigger remote code execution or memory corruption. Public exploitation activity is noted, and multiple sources attribute a memory‑corruption vulnerability enabling attacker code execution via specially cr...

CVE-2015-1708

Microsoft Internet Explorer 8 and 9 are affected by CVE-2015-1708, a memory corruption vulnerability that enables remote code execution or memory-related denial of service when a user visits a crafted webpage. The issue is addressed by the MS15-043 security update (KB 3049563) and related advisor...

CVE-2015-2484

Microsoft Internet Explorer 10/11 contains a Tampering Vulnerability (CVE-2015-2484) caused by an incorrect file-system flag during certain accesses, enabling a remote attacker to delete arbitrary files via crafted web content. Public details indicate exploitation via user-assisted access to mali...

CVE-2015-6074

Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2015-6074) affects IE 7–11. A crafted web site can trigger memory corruption, enabling remote code execution or a denial of service. Connected CNVD entries confirm this class of vulnerability but do not provide product-specific expl...

CVE-2015-6080

Microsoft Internet Explorer 11 is affected by a memory corruption vulnerability that enables remote code execution or a denial of service when loading a crafted web site. The advisory notes this is a separate issue from related CVEs (e.g., 2015-6068/6072/6073/etc.). Exploitation details are not p...

CVE-2015-6141

Microsoft Internet Explorer 9 is affected by CVE-2015-6141, a memory corruption vulnerability exploitable via a crafted web site that can lead to remote code execution or denial of service. The available documents identify the affected product (Internet Explorer 9) and the attack vector (crafted ...

CVE-2016-3210

The Microsoft JScript and VBScript engines , as utilized in Internet Explorer 11 , are susceptible to a memory corruption vulnerability (buffer overflow). A remote attacker can exploit this flaw by visiting a specially crafted website to execute arbitrary code in the context of the current user o...

CVE-2016-3276

CVE-2016-3276 affects Microsoft Internet Explorer 11 and Microsoft Edge. A remote attacker can trigger a content-spoofing attack by sending or hosting a specially crafted URL, potentially convincing users to visit a malicious page after user interaction (clicking the URL). Exploitation scenarios ...

CVE-2016-3292

CVE-2016-3292 is the Internet Explorer Elevation of Privilege vulnerability. The connected MS advisories (MS16-104, KB3185319, and related MSRC entries) confirm that Internet Explorer on affected Windows versions mishandles zone and integrity settings, enabling sandbox bypass via a crafted webpag...

CVE-1999-0331

The provided documents identify CVE-1999-0331 as a buffer overflow vulnerability in Internet Explorer 4.0(1) . The description confirms a buffer overflow issue, but none of the connected documents supply a concrete fix version, remediation steps, affected subcomponents, exploit details, or in‑the...

CVE-1999-0537

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-1999-0967

CVE-1999-0967 describes a buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource protocol. The connected PT-1997-1176 entry reiterates a buffer overflow in the HTML library with affected software and recommends updating to ...

CVE-1999-1093

The CVE-1999-1093 entry describes a buffer overflow in the Window.External function of the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier . The flaw allows remote attackers to execute arbitrary commands via a malicious web page . Connected sources confirm the affected componen...

CVE-1999-1370

The CVE-1999-1370 entry concerns the Internet Explorer 5.0 setup wizard (ie5setup.exe). The provided sources state that during unattended installation it disables the screen saver and the Task Scheduler Service, potentially allowing local access or disruption of security-critical program executio...

CVE-2002-2125

In the provided documents, CVE-2002-2125 affects Internet Explorer 6.0 . The vulnerability occurs when an expired certificate authority (CA) certificate is submitted to the user while a newer CA certificate already exists in the local store, and IE does not warn the user. This can allow remote at...

CVE-2004-1155

The CVE-2004-1155 entry describes a window-injection flaw in multiple browsers where a malicious site can replace content in a popup window opened from a trusted site by referencing the popup’s known name across domains. Connected advisories (CPAI-2004-205) explain that the vulnerability arises f...

CVE-2006-3899

Microsoft Internet Explorer 6.0 on Windows XP SP2 is affected by CVE-2006-3899 due to the CEnroll.CEnroll.2 ActiveX object’s stringToBinary function: a long second argument triggers an invalid memory access in SysAllocStringLen, leading to remote DoS (application crash). This aligns with NVD deta...

CVE-2006-5162

CVE-2006-5162 affects wininet.dll in Microsoft Internet Explorer 6.0 SP2 and earlier. A long Content-Type header can trigger a stack overflow, causing a remote denial of service (unhandled exception and crash). The vulnerability has NETWORK attack vector with LOW complexity and no authentication ...

CVE-2006-7031

Microsoft Internet Explorer 6.0.2900 SP2 and earlier is affected by CVE-2006-7031 due to a flaw in mshtml.dll triggered by a table element with a CSS position attribute, allowing remote attackers to cause a denial of service (crash). The vulnerability is documented across multiple sources (NVD/CV...

CVE-2007-3075

CVE-2007-3075: Directory traversal vulnerability in Microsoft Internet Explorer allows remote attackers to read arbitrary files via directory traversal sequences in a URI with a certain scheme (e.g., encoded backslash). The connected documents confirm the vulnerability description but do not spec...

CVE-2007-3164

Technical details (affected product/version, root cause, impact or fixes) are not publicly detailed in the provided documents. Monitor for updates on CVE-2007-3164.

CVE-2007-3576

Microsoft Internet Explorer 6 is affected by a vulnerability where web scripts can be executed from URIs using arbitrary scheme names that end with the sequence “script.” This uses the vbscript: handler for seven to nine character scheme names and the javascript: handler for ten or more character...

CVE-2007-3930

The CVE-2007-3930 entry concerns a XSS vulnerability in DokuWiki’s spellchecker backend. Affects DokuWiki spellcheck.php (lib/exe/spellcheck.php) where the spell_utf8test path triggers HTML document identification and script execution by Internet Explorer when validating UTF-8 messages, even if t...

CVE-2008-1442

CVE-2008-1442 concerns a heap-based buffer overflow in the substringData method of Internet Explorer 6 and 7, allowing remote code execution via crafted web pages (HTML Objects Memory Corruption). The connected MSKB (MS08-031) confirms multiple affected IE versions on Windows XP/2003 family and d...

CVE-2008-4788

Microsoft Internet Explorer 6 is affected by CVE-2008-4788 due to a flaw in how the address bar renders URLs with high-bit characters. The vulnerability occurs when IE omits high-bit URL-encoded characters in the address bar, enabling remote attackers to spoof the address bar by using a domain na...

CVE-2013-5046

Technical details about CVE-2013-5046 (affected products, root cause, impact, fixes) are not publicly disclosed in the provided Connected Documents. Please monitor for updates from official advisories.

CVE-2014-2794

CVE-2014-2794 affects Microsoft Internet Explorer 6 and 7. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. Public exploits exist. Remediation: apply updates (e.g., MS14-037) and other Microsoft security guidance; monito...

CVE-2014-4096

The connected advisories describe remote code execution and memory corruption in Microsoft Internet Explorer 11 through crafted pages, with concrete technical details such as use-after-free and uninitialized memory (e.g., CBackgroundCollection, CHTMLEditorProxy, CAttrValue) leading to arbitrary c...

CVE-2015-6081

CVE-2015-6081 affects Microsoft Internet Explorer 8–11 and is a memory-corruption vulnerability that allows remote code execution or a denial of service when a user visits a crafted site. The connected CNVD entries corroborate a memory- corruption flaw in IE8–11 triggered by crafted web content. ...

CVE-2016-0068

CVE-2016-0068 affects Microsoft Internet Explorer 9–11. It describes a cross-domain policy bypass vulnerability that could allow remote attackers to bypass the Same Origin Policy via unspecified vectors, potentially enabling information access across domains. The related JVN entries indicate the ...

CVE-1999-1453

The CVE-1999-1453 issue concerns Internet Explorer 4 where a remote attacker can read the contents of a user’s clipboard through the Internet WebBrowser ActiveX object. The description indicates an impact on clipboard confidentiality via a WebBrowser ActiveX component, triggered by visiting a mal...

CVE-2000-0439

Vulnerability: Internet Explorer 4.0/5.0. Issue: malicious site can obtain cookies from another domain by embedding that domain name with escaped characters in a URL (Unauthorized Cookie Access). Root cause: cross-domain cookie access via crafted URL. Impact: potential leakage of cookies across d...

CVE-2001-0149

CVE-2001-0149 affects Windows Scripting Host in Internet Explorer 5.5 and earlier. The vulnerability allows remote attackers to read arbitrary files through the GetObject JavaScript function and the htmlfile ActiveX object. Affected product: Internet Explorer on Windows (older IE versions). Root ...

CVE-2001-1497

Microsoft Internet Explorer 4.0–6.0 has a local-privilege issue where an attacker can differentiate alphanumeric from non-alphanumeric password characters by using certain control-key navigation, potentially aiding brute-force guessing. The issue affects IE versions 4.0 through 6.0; CVSSv2 base s...

CVE-2002-1705

CVE-2002-1705 concerns Microsoft Internet Explorer 5.5 through 6.0, where a remote attacker could cause a denial of service (crash) by supplying a Cascading Style Sheet that uses the p{cssText} element declared with a bold font weight. Affected product family is Internet Explorer; the root cause ...

CVE-2004-0484

The CVE-2004-0484 entry concerns Microsoft Internet Explorer 6.0.2800, specifically the mshtml.dll component. A crafted HTML table containing a form that spans multiple td elements and references a CSS “float: left” class in a stylesheet link located after the table can trigger a null dereference...

CVE-2005-1829

Microsoft Internet Explorer 6 SP2 is affected by CVE-2005-1829. The vulnerability allows remote attackers to cause a denial of service (infinite loop and application crash) via two embedded files that call each other. The available sources describe the issue at a high level (DoS through crafted e...

CVE-2006-0585

CVE-2006-0585 affects jscript.dll in Microsoft Internet Explorer 6.0 SP1 and earlier. A remote attacker can cause a denial of service (application crash) by embedding a Shockwave Flash object that contains ActionScript code calling VBScript, which then calls Javascript’s document.write, triggerin...

CVE-2006-3450

CVE-2006-3450 corresponds to a memory-corruption vulnerability in Microsoft Internet Explorer (IE6/IE5 SP4) involving HTML layout and certain layout-positioning combinations. The root cause is improper handling of CSS/class-related content (e.g., document.getElementByID usage) which could allow r...

CVE-2006-3472

Microsoft Internet Explorer 6.0 and 6.0 SP1 is affected by a vulnerability that allows remote attackers to cause a denial of service via an HTML page containing an A tag with a long title attribute. The connected documents specify the affected software and the basic exploit vector, but do not pro...

CVE-2006-3657

Microsoft Internet Explorer 6 contains a vulnerability in the DXImageTransform.Microsoft.Gradient ActiveX object. A long StartColorStr or EndColorStr property can trigger a remote denial of service via a stack overflow. Affected: IE6; vulnerability impact is to crash/partial availability. The doc...