CVE-2008-2254

CVE-2008-2254 corresponds to a memory corruption vulnerability in Microsoft Internet Explorer 6/7 . The issue arises when IE accesses objects that are not properly initialized in HTML processing, leading to a crash or remote code execution within the user’s context. Multiple connected sources cor...

CVE-2006-3472

Microsoft Internet Explorer 6.0 and 6.0 SP1 is affected by a vulnerability that allows remote attackers to cause a denial of service via an HTML page containing an A tag with a long title attribute. The connected documents specify the affected software and the basic exploit vector, but do not pro...

CVE-2008-2257

CVE-2008-2257 concerns memory corruption in Microsoft Internet Explorer 5.01/6/7 when handling a document object appended in a specific order, allowing remote code execution and DoS under memory corruption scenarios. Connected sources also reference CVE-2008-2258, described as a related memory-co...

CVE-2009-3943

CVE-2009-3943 affects Microsoft Internet Explorer 6 (up to build 6.0.2900.2180) and IE7 (up to 7.0.6000.16711). The vulnerability arises when a JavaScript loop configures the home page via the setHomePage method in conjunction with a DHTML behavior property, leading to a denial of service (applic...

CVE-2010-3342

CVE-2010-3342 affects Microsoft Internet Explorer 6–8, where the browser may render cached HTML content that comes from a different domain/zone via script, enabling cross-domain information disclosure. The issue is documented alongside CVE-2010-3348 (another cross-domain disclosure) and is mitiga...

CVE-2011-4689

CVE-2011-4689 affects Microsoft Internet Explorer 6–9 and is a timing-based information-disclosure vulnerability in which SOP/Same Origin Policy timing data can be captured during IFRAME loading. Several connected sources (Red Hat advisory, NVD entry, and OpenVAS/SEebug records) describe that rem...

CVE-2013-3140

This CVE (CVE-2013-3140) concerns a Use-After-Free in Microsoft Internet Explorer 9. The vulnerability is triggered by visiting a crafted webpage that accesses a deleted CMarkup object, enabling remote code execution. The issue is tied to IE9’s handling of CMarkup, and is documented as a high-sev...

CVE-2013-3188

CVE-2013-3188 affects Microsoft Internet Explorer 8 and 9. The vulnerability allows remote code execution via a crafted web site due to memory corruption, enabling an attacker to run arbitrary code. The entry is coordinated with CVE-2013-3189 and is associated with MS13-059 (patch/mitigation). Af...

CVE-2013-3201

Microsoft Internet Explorer 9–10 memory corruption vulnerability (CVE-2013-3201/3203/3206/3207/3209) can allow remote code execution or memory corruption via a crafted web site. Seebug entries for CVE-2013-3201/3207 describe exploitation across IE versions 6–10 with remote code execution in the c...

CVE-2013-3871

CVE-2013-3871 corresponds to multiple remote code execution/memory corruption vulnerabilities in Microsoft Internet Explorer (IE) 6–10, triggered by viewing a crafted website. Connected sources (MS13-088) describe an in-memory object access flaw in IE that could allow code execution under the use...

CVE-2013-4015

CVE-2013-4015 describes an elevation of privilege in Microsoft Internet Explorer 6–10 where local users could bypass protection mode checks (Protected Mode or Enhanced Protected Mode) by executing sandboxed code. The issue is documented in the IE sandbox bypass context and is covered by the MS13-...

CVE-2014-0280

CVE-2014-0280 maps to a memory-corruption vulnerability in Microsoft Internet Explorer (IE) with remote code execution and denial-of-service potential via a crafted web site. The CVE record specifies IE 6–8 as affected. Public exploitation is reported, and malware/exploits exist for this issue. T...

CVE-2014-1790

Microsoft Internet Explorer 10 is affected by CVE-2014-1790, a memory-corruption vulnerability that can be triggered by a crafted web site, enabling remote code execution or memory-corruption DoS. Root cause: memory corruption in IE10. Mitigation: apply MS14-035 Security Update for Internet Explo...

CVE-2014-2756

Technical details for CVE-2014-2756 are not publicly available in the provided documents. Monitor for updates.

CVE-2015-0046

CVE-2015-0046 targets Microsoft Internet Explorer 9–11. The associated Nessus plugin confirms an IE memory corruption vulnerability that can enable remote code execution via a crafted web page. The practical remediation is applying security updates: MS15-009 (Security Update 3034682). Full protec...

CVE-2015-0053

CVE-2015-0053 affects Microsoft Internet Explorer 6–8, where memory corruption can be triggered by visiting a crafted web page, potentially enabling remote code execution or denial of service. This is part of the MS15-009 update set; the Nessus plugin notes IE variants and emphasizes that systems...

CVE-2015-2484

Microsoft Internet Explorer 10/11 contains a Tampering Vulnerability (CVE-2015-2484) caused by an incorrect file-system flag during certain accesses, enabling a remote attacker to delete arbitrary files via crafted web content. Public details indicate exploitation via user-assisted access to mali...

CVE-2015-6081

CVE-2015-6081 affects Microsoft Internet Explorer 8–11 and is a memory-corruption vulnerability that allows remote code execution or a denial of service when a user visits a crafted site. The connected CNVD entries corroborate a memory- corruption flaw in IE8–11 triggered by crafted web content. ...

CVE-2016-0068

CVE-2016-0068 affects Microsoft Internet Explorer 9–11. It describes a cross-domain policy bypass vulnerability that could allow remote attackers to bypass the Same Origin Policy via unspecified vectors, potentially enabling information access across domains. The related JVN entries indicate the ...

CVE-2016-3276

CVE-2016-3276 affects Microsoft Internet Explorer 11 and Microsoft Edge. A remote attacker can trigger a content-spoofing attack by sending or hosting a specially crafted URL, potentially convincing users to visit a malicious page after user interaction (clicking the URL). Exploitation scenarios ...

CVE-1999-1094

The vulnerability CVE-1999-1094 affects Internet Explorer 4.01 and earlier. A buffer overflow can be triggered by a long URL using the mk: protocol, enabling a remote attacker to execute arbitrary commands. According to the NVD entry, the attack vector is network, with low complexity and no authe...

CVE-1999-1577

CVE-1999-1577 describes a buffer overflow in the HHOpen ActiveX control (hhopen.ocx) version 1.0.0.1 used with Internet Explorer 4.01/5. The vulnerability allows remote attackers to execute arbitrary commands by passing long arguments to the OpenHelp method. The available sources confirm the vuln...

CVE-2001-0727

Summary of CVE-2001-0727 (File Execution Vulnerability) : Internet Explorer 6.0 on Windows is affected by a vulnerability in MIME header handling (Content-Disposition and Content-Type). An attacker can cause code execution by modifying headers to disguise downloaded content as safe, potentially t...

CVE-2001-1497

Microsoft Internet Explorer 4.0–6.0 has a local-privilege issue where an attacker can differentiate alphanumeric from non-alphanumeric password characters by using certain control-key navigation, potentially aiding brute-force guessing. The issue affects IE versions 4.0 through 6.0; CVSSv2 base s...

CVE-2002-1705

CVE-2002-1705 concerns Microsoft Internet Explorer 5.5 through 6.0, where a remote attacker could cause a denial of service (crash) by supplying a Cascading Style Sheet that uses the p{cssText} element declared with a bold font weight. Affected product family is Internet Explorer; the root cause ...

CVE-2004-1155

The CVE-2004-1155 entry describes a window-injection flaw in multiple browsers where a malicious site can replace content in a popup window opened from a trusted site by referencing the popup’s known name across domains. Connected advisories (CPAI-2004-205) explain that the vulnerability arises f...

CVE-2004-2704

HastyMail (PHP-based mail client) does not send the attachment parameter in the Content-Disposition header for attachments in versions ≤1.0.1 (stable) and ≤1.1 (development). This causes attachments to render inline in Internet Explorer when the download link is clicked, facilitating cross-site s...

CVE-2006-7029

CVE-2006-7029 affects Microsoft Internet Explorer 6 SP2 and earlier. A frameset with only one frame that calls resizeTo with specific arguments can trigger a remote denial of service (crash). The entry notes a possible relation to CVE-2006-3637, but the provided documents do not specify a patch v...

CVE-2007-2291

The CVE-2007-2291 entry describes a CRLF (HTTP header) injection vulnerability in the Digest Authentication support of Microsoft Internet Explorer 7.0.5730.11. The flaw permits remote attackers to perform HTTP response splitting by injecting a line feed (%0a) into the username attribute, potentia...

CVE-2007-3550

Microsoft Internet Explorer 6.0 and 7.0 are identified as affected. The vulnerability allows remote attackers to manipulate Zone settings by injecting certain metacharacters (e.g., wildcards) via JavaScript to fill Zones with arbitrary domains, leading to a denial of service through website suppr...

CVE-2008-4788

Microsoft Internet Explorer 6 is affected by CVE-2008-4788 due to a flaw in how the address bar renders URLs with high-bit characters. The vulnerability occurs when IE omits high-bit URL-encoded characters in the address bar, enabling remote attackers to spoof the address bar by using a domain na...

CVE-2010-2119

The CVE-2010-2119 entry concerns Microsoft Internet Explorer 6.0.2900.2180, where JavaScript code that loops infinitely to create IFRAME elements for invalid nntp:// URIs can cause a denial of service through resource consumption. Connected sources corroborate a DoS condition in IE triggered by i...

CVE-2010-3348

Microsoft Internet Explorer 6–8 is affected by a Cross‑Domain Information Disclosure vulnerability (CVE-2010-3348) where cached content could be rendered as HTML, allowing access to content from a different domain or zone via script. The issue stems from IE not preventing rendering of cached cont...

CVE-2013-3162

CVE-2013-3162 affects Internet Explorer 7–10. The vulnerability is a memory corruption issue triggered by a crafted web site, leading to remote code execution or memory corruption denial of service. It is part of a set of IE memory corruption vulnerabilities; the related entry CVE-2013-3115 cover...

CVE-2014-1774

Affected software: Microsoft Internet Explorer 9. The vulnerability is a memory corruption flaw in IE9 that can be triggered by a crafted web site, enabling remote code execution or a denial of service. This CVE is part of a set (CVE-2014-1774, -1788, -2754) describing memory corruption vulnerabi...

CVE-2014-1788

CVE-2014-1788 affects Microsoft Internet Explorer 9 and is described as a memory corruption vulnerability that can be triggered by visiting a crafted web site, potentially allowing remote code execution or denial of service. The connected records corroborate a family of IE9 memory corruption issu...

CVE-2014-2790

Microsoft Internet Explorer 11 has a memory corruption vulnerability (CVE-2014-2790) that could allow remote code execution or a denial of service when visiting a crafted web site. The issue affects IE 6–11, but the Core details point to IE 11, with the described impact requiring no user interact...

CVE-2014-2800

Microsoft Internet Explorer versions 6–11 are affected by memory corruption vulnerabilities identified as CVE-2014-2800 (and related CVEs 2807/2809). A crafted web site can trigger remote code execution or memory corruption, potentially allowing attacker-controlled actions. Public exploits exist ...

CVE-2014-2802

CVE-2014-2802 describes a memory‑corruption vulnerability in Microsoft Internet Explorer 11 that can be triggered by visiting a crafted website, allowing remote code execution or memory corruption. Public exploits exist for this vulnerability per OpenVAS, and affected products cover Internet Expl...

CVE-2015-1710

CVE-2015-1710 affects Microsoft Internet Explorer versions 6–11. The connected sources describe a memory corruption vulnerability exploitable via a crafted web page, enabling remote code execution or a denial of service. The CVE is explicitly distinguished from CVE-2015-1694. The available docume...

CVE-2015-6080

Microsoft Internet Explorer 11 is affected by a memory corruption vulnerability that enables remote code execution or a denial of service when loading a crafted web site. The advisory notes this is a separate issue from related CVEs (e.g., 2015-6068/6072/6073/etc.). Exploitation details are not p...

CVE-2016-0103

CVE-2016-0103 corresponds to a memory corruption remote code execution vulnerability in Microsoft Internet Explorer 11. Affected component: Internet Explorer 11 (Windows). Underlying issue: memory corruption triggered by visiting a crafted web site, enabling arbitrary code execution or denial of ...

CVE-1999-0487

The vulnerability CVE-1999-0487 affects the DHTML Edit ActiveX control (dhtmled.ocx) used by Internet Explorer. The control can read arbitrary local files, enabling an attacker to exfiltrate data through the browser. Concrete details confirm affected software and root cause: Internet Explorer wit...

CVE-1999-1235

CVE-1999-1235 affects Internet Explorer 5.0 and involves the browser recording FTP credentials in the URL history (index.dat) and exposing them via the status bar when hovering links. The underlying issue is that usernames/passwords are stored in client-side history data, enabling local users to ...

CVE-2001-0089

CVE-2001-0089 affects Internet Explorer 5.0–5.5. The vulnerability allows a remote attacker to read arbitrary files from the client through an HTML form using an INPUT TYPE element, known as the “File Upload via Form” issue. The provided documents do not specify payloads, affected configurations ...

CVE-2001-0875

CVE-2001-0875 affects Internet Explorer 5.01/5.5/6.0 where the file-download dialog can misrepresent the filename, potentially enabling remote code execution. OpenVAS details indicate the July 2004 IE Cumulative Patch (MS05-020) mitigates this, but it is not applied on the remote host in one list...

CVE-2002-0500

The CVE-2002-0500 entry describes a vulnerability in Internet Explorer 5.0–6.0 where a remote attacker can determine the existence of local files on a client by abusing an IMG tag with a dynsrc attribute that references the target file, causing the image object to reveal information such as file ...

CVE-2002-1714

CVE-2002-1714 affects Microsoft Internet Explorer 5.0 through 6.0. The issue arises when processing an object of type "text/html" where the DATA field identifies the HTML document containing the object, which may trigger infinite recursion and cause a denial of service (crash). NVD lists a CVSS v...

CVE-2002-2062

CVE-2002-2062 affects Internet Explorer 5.5/6.0 on Windows 2000 via the ftp.htt component when the user has “Enable folder view for FTP sites” and “Enable Web content in folders” enabled. The vulnerability is a cross-site scripting (XSS) issue where an attacker can inject arbitrary web script/HTM...

CVE-2004-0978

The CVE-2004-0978 issue is a heap-based buffer overflow in the Hrtbeat.ocx ActiveX control used by MSN/MSN Gaming sites on Internet Explorer 5.01–6. The vulnerability allows remote code execution via the SetupData parameter and arises in the ActiveX control’s handling of data during online gaming...