CVE-2007-3164

Technical details (affected product/version, root cause, impact or fixes) are not publicly detailed in the provided documents. Monitor for updates on CVE-2007-3164.

CVE-2008-2257

CVE-2008-2257 concerns memory corruption in Microsoft Internet Explorer 5.01/6/7 when handling a document object appended in a specific order, allowing remote code execution and DoS under memory corruption scenarios. Connected sources also reference CVE-2008-2258, described as a related memory-co...

CVE-2008-4260

CVE-2008-4260 : An uninitialized memory corruption vulnerability in Microsoft Internet Explorer 7 occurs when IE accesses an object that has been deleted. Exploitation via a specially crafted HTML page could allow remote code execution with the caller’s privileges. The issue is part of a set of I...

CVE-2013-2557

The CVE targets Microsoft Internet Explorer 9’s sandbox protection mechanism. A memory corruption vulnerability could allow remote attackers to cause a denial of service or other unspecified impact via unknown vectors, demonstrated against Flash in Pwn2Own/CanSecWest 2013. Affected component: IE9...

CVE-2013-3162

CVE-2013-3162 affects Internet Explorer 7–10. The vulnerability is a memory corruption issue triggered by a crafted web site, leading to remote code execution or memory corruption denial of service. It is part of a set of IE memory corruption vulnerabilities; the related entry CVE-2013-3115 cover...

CVE-2013-3871

CVE-2013-3871 corresponds to multiple remote code execution/memory corruption vulnerabilities in Microsoft Internet Explorer (IE) 6–10, triggered by viewing a crafted website. Connected sources (MS13-088) describe an in-memory object access flaw in IE that could allow code execution under the use...

CVE-2014-6347

Microsoft Internet Explorer 11 is affected by CVE-2014-6347 (Memory corruption) which can allow remote code execution via a crafted web page. The root cause involves memory corruption when handling certain objects in IE, enabling code execution in the context of the user. Public exploits exist; r...

CVE-2015-0046

CVE-2015-0046 targets Microsoft Internet Explorer 9–11. The associated Nessus plugin confirms an IE memory corruption vulnerability that can enable remote code execution via a crafted web page. The practical remediation is applying security updates: MS15-009 (Security Update 3034682). Full protec...

CVE-2015-0099

CVE-2015-0099 affects Microsoft Internet Explorer 10 (and related IE versions in context of MS15-018). The vulnerability is described as a memory corruption error that an attacker can trigger by presenting a crafted web page, allowing remote code execution or denial of service. The issue was addr...

CVE-2015-6072

Technical details for CVE-2015-6072 are not publicly available in the provided documents. The connected sources discuss memory corruption vulnerabilities in Internet Explorer/Edge in general but do not specify this CVE's affected versions or fixes. Monitor for updates.

CVE-2015-6080

Microsoft Internet Explorer 11 is affected by a memory corruption vulnerability that enables remote code execution or a denial of service when loading a crafted web site. The advisory notes this is a separate issue from related CVEs (e.g., 2015-6068/6072/6073/etc.). Exploitation details are not p...

CVE-2015-6081

CVE-2015-6081 affects Microsoft Internet Explorer 8–11 and is a memory-corruption vulnerability that allows remote code execution or a denial of service when a user visits a crafted site. The connected CNVD entries corroborate a memory- corruption flaw in IE8–11 triggered by crafted web content. ...

CVE-1999-0487

The vulnerability CVE-1999-0487 affects the DHTML Edit ActiveX control (dhtmled.ocx) used by Internet Explorer. The control can read arbitrary local files, enabling an attacker to exfiltrate data through the browser. Concrete details confirm affected software and root cause: Internet Explorer wit...

CVE-1999-0537

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2001-0667

CVE-2001-0667 affects Internet Explorer 6 and earlier when used with the Telnet client in Services for Unix (SFU) 2.0. The vulnerability allows remote attackers to spawn Telnet with a log-file option on the command line, enabling writing arbitrary code into an executable file that is later execut...

CVE-2002-1185

CVE-2002-1185 affects Internet Explorer 5.01–6.0. The issue is a parsing flaw where PNG parameters are not properly checked when opening a PNG file, enabling a remote attacker to trigger a heap-based buffer overflow during decompression and cause a denial of service (crash). The connected documen...

CVE-2002-1670

CVE-2002-1670 concerns Microsoft Windows XP Professional upgrade edition where applying an upgrade overwrites already installed Internet Explorer 6.0 patches, resulting in Internet Explorer being left unpatched. The connected sources reiterate this description without adding concrete exploit deta...

CVE-2004-0978

The CVE-2004-0978 issue is a heap-based buffer overflow in the Hrtbeat.ocx ActiveX control used by MSN/MSN Gaming sites on Internet Explorer 5.01–6. The vulnerability allows remote code execution via the SetupData parameter and arises in the ActiveX control’s handling of data during online gaming...

CVE-2005-1829

Microsoft Internet Explorer 6 SP2 is affected by CVE-2005-1829. The vulnerability allows remote attackers to cause a denial of service (infinite loop and application crash) via two embedded files that call each other. The available sources describe the issue at a high level (DoS through crafted e...

CVE-2005-2274

The connected sources confirm CVE-2005-2274 affects Microsoft Internet Explorer 6.0 and describes a dialog-origin spoofing vulnerability where a JavaScript dialog box may not be clearly tied to the page that generated it, enabling an attacker to impersonate a trusted site and facilitate phishing....

CVE-2006-3899

Microsoft Internet Explorer 6.0 on Windows XP SP2 is affected by CVE-2006-3899 due to the CEnroll.CEnroll.2 ActiveX object’s stringToBinary function: a long second argument triggers an invalid memory access in SysAllocStringLen, leading to remote DoS (application crash). This aligns with NVD deta...

CVE-2006-7029

CVE-2006-7029 affects Microsoft Internet Explorer 6 SP2 and earlier. A frameset with only one frame that calls resizeTo with specific arguments can trigger a remote denial of service (crash). The entry notes a possible relation to CVE-2006-3637, but the provided documents do not specify a patch v...

CVE-2007-3497

Affected software: Microsoft Internet Explorer 7. Vulnerability: remote attackers can determine the existence of page history via the history.length JavaScript variable. Root cause/notes: description states the issue but does not specify a root cause in these documents. Impact: information disclo...

CVE-2007-4848

CVE-2007-4848 affects Microsoft Internet Explorer 4.0–7. The issue allows remote attackers to determine whether local files have associated images by using a res:// URI in the src property of a JavaScript Image object, demonstrated with bitmap data inside a (1) .exe or (2) .dll file. The connecte...

CVE-2007-5355

The CVE describes a design/logic issue in Microsoft WPAD for Internet Explorer 6/7 where, if a primary DNS suffix has three or more components, unqualified wpad queries can resolve to a host in a deeper second-level domain outside the configured DNS zone, enabling potential MITM by remote WPAD se...

CVE-2008-2254

CVE-2008-2254 corresponds to a memory corruption vulnerability in Microsoft Internet Explorer 6/7 . The issue arises when IE accesses objects that are not properly initialized in HTML processing, leading to a crash or remote code execution within the user’s context. Multiple connected sources cor...

CVE-2008-4788

Microsoft Internet Explorer 6 is affected by CVE-2008-4788 due to a flaw in how the address bar renders URLs with high-bit characters. The vulnerability occurs when IE omits high-bit URL-encoded characters in the address bar, enabling remote attackers to spoof the address bar by using a domain na...

CVE-2009-1530

CVE-2009-1530 corresponds to a use-after-free memory corruption in Microsoft Internet Explorer 7. The vulnerability affects IE7 on Windows XP SP2/SP3, Server 2003 SP2, Vista (Gold, SP1, SP2), and Server 2008 SP2, and is triggered by repeatedly adding HTML document nodes and invoking event handler...

CVE-2010-3348

Microsoft Internet Explorer 6–8 is affected by a Cross‑Domain Information Disclosure vulnerability (CVE-2010-3348) where cached content could be rendered as HTML, allowing access to content from a different domain or zone via script. The issue stems from IE not preventing rendering of cached cont...

CVE-2011-4689

CVE-2011-4689 affects Microsoft Internet Explorer 6–9 and is a timing-based information-disclosure vulnerability in which SOP/Same Origin Policy timing data can be captured during IFRAME loading. Several connected sources (Red Hat advisory, NVD entry, and OpenVAS/SEebug records) describe that rem...

CVE-2013-3872

CVE-2013-3882 (Microsoft Internet Explorer 10) is described in the provided sources as a memory-corruption vulnerability that allows remote code execution or a denial of service via a crafted web site. The NVD entry for CVE-2013-3882 notes it as a distinct vulnerability from CVE-2013-3872, CVE-20...

CVE-2013-3909

CVE-2013-3909 affects Microsoft Internet Explorer 6–8. An attacker can read content from a different domain/zone via crafted CSS token sequences, enabling remote information disclosure. The issue is addressed by Microsoft Security Bulletin MS13-088 and corresponding patches. The vulnerability sch...

CVE-2013-4015

CVE-2013-4015 describes an elevation of privilege in Microsoft Internet Explorer 6–10 where local users could bypass protection mode checks (Protected Mode or Enhanced Protected Mode) by executing sandboxed code. The issue is documented in the IE sandbox bypass context and is covered by the MS13-...

CVE-2014-0280

CVE-2014-0280 maps to a memory-corruption vulnerability in Microsoft Internet Explorer (IE) with remote code execution and denial-of-service potential via a crafted web site. The CVE record specifies IE 6–8 as affected. Public exploitation is reported, and malware/exploits exist for this issue. T...

CVE-2014-0304

Microsoft Internet Explorer 11 is affected by CVE-2014-0304 (Memory Corruption). The vulnerability allows remote code execution or denial of service via a crafted web page due to memory object access. Mitigation provided by the vendor through MS14-012 (Cumulative Security Update for Internet Expl...

CVE-2014-1769

Technical details for CVE-2014-1769 are not publicly available in the provided documents; monitor for updates.

CVE-2014-1788

CVE-2014-1788 affects Microsoft Internet Explorer 9 and is described as a memory corruption vulnerability that can be triggered by visiting a crafted web site, potentially allowing remote code execution or denial of service. The connected records corroborate a family of IE9 memory corruption issu...

CVE-2014-1800

CVE-2014-1800 is a remote code execution flaw in Microsoft Internet Explorer 6–11. The vulnerability arises from how IE handles an object that has not been correctly initialized or has been deleted, enabling memory corruption when a user visits a crafted webpage. Public exploitation exists, and a...

CVE-2014-2757

CVE-2014-2757 concerns memory corruption in Microsoft Internet Explorer (IE6–IE11) triggered by a crafted web page, enabling remote code execution or memory corruption. The connected document set discusses a broader category of IE memory corruption/UAF issues and references MS14-035 (CVE-2014-028...

CVE-2014-2790

Microsoft Internet Explorer 11 has a memory corruption vulnerability (CVE-2014-2790) that could allow remote code execution or a denial of service when visiting a crafted web site. The issue affects IE 6–11, but the Core details point to IE 11, with the described impact requiring no user interact...

CVE-2014-2802

CVE-2014-2802 describes a memory‑corruption vulnerability in Microsoft Internet Explorer 11 that can be triggered by visiting a crafted website, allowing remote code execution or memory corruption. Public exploits exist for this vulnerability per OpenVAS, and affected products cover Internet Expl...

CVE-2015-6141

Microsoft Internet Explorer 9 is affected by CVE-2015-6141, a memory corruption vulnerability exploitable via a crafted web site that can lead to remote code execution or denial of service. The available documents identify the affected product (Internet Explorer 9) and the attack vector (crafted ...

CVE-2015-6157

CVE-2015-6157 is an information-disclosure vulnerability in Microsoft Internet Explorer 11. A crafted webpage can cause memory disclosure, allowing remote attackers to read sensitive process memory. Public exploitation is noted in related NASL plugin data for MS15-124 (IE updates), and multiple a...

CVE-2016-0106

CVE-2016-0106 concerns Microsoft Internet Explorer 11 memory corruption via a crafted web site, leading to remote code execution or memory corruption. Connected data confirms the same family affects IE11/Edge with similar impact; root cause is improper handling of memory objects in IE11. The vuln...

CVE-2016-3210

CVE-2016-3210 is the Scripting Engine Memory Corruption Vulnerability affecting Microsoft Internet Explorer 11 JScript and VBScript engines. Public sources (NVD/MS16-063) describe remote code execution or memory corruption via a crafted webpage, allowing an attacker to execute arbitrary code in t...

CVE-1999-0967

CVE-1999-0967 describes a buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource protocol. The connected PT-1997-1176 entry reiterates a buffer overflow in the HTML library with affected software and recommends updating to ...

CVE-1999-1370

The CVE-1999-1370 entry concerns the Internet Explorer 5.0 setup wizard (ie5setup.exe). The provided sources state that during unattended installation it disables the screen saver and the Task Scheduler Service, potentially allowing local access or disruption of security-critical program executio...

CVE-1999-1577

CVE-1999-1577 describes a buffer overflow in the HHOpen ActiveX control (hhopen.ocx) version 1.0.0.1 used with Internet Explorer 4.01/5. The vulnerability allows remote attackers to execute arbitrary commands by passing long arguments to the OpenHelp method. The available sources confirm the vuln...

CVE-2001-0149

CVE-2001-0149 affects Windows Scripting Host in Internet Explorer 5.5 and earlier. The vulnerability allows remote attackers to read arbitrary files through the GetObject JavaScript function and the htmlfile ActiveX object. Affected product: Internet Explorer on Windows (older IE versions). Root ...

CVE-2001-0643

Affected software: Internet Explorer 5.5. Issue: CLSID not displayed when it appears at the end of a file name, enabling spoofing of file type and potentially deceiving users into executing a dangerous program. Impact: user may run unintended or unsafe code due to misleading file type indication....