CVE-2010-3962

CVE-2010-3962 is an uninitialized memory corruption / use-after-free vulnerability in Microsoft Internet Explorer 6–8 (mshtml) triggered via CSS token sequences and the clip attribute, leading to remote code execution. The CVE notes it was exploited in the wild in November 2010. Public details de...

CVE-2014-0284

CVE-2014-0284 affects Microsoft Internet Explorer 9 and 10, where memory corruption can be triggered by visiting a crafted web site, potentially allowing remote code execution or a denial of service. The root cause is memory object handling that can be corrupted under attack. Public exploits exis...

CVE-2012-2546

The CVE-2012-2546 entry concerns a memory-use-after-free vulnerability in Microsoft Internet Explorer 9 (IE9) related to the Event Listener use-after-free vulnerability. The underlying issue is a use-after-free in IE9’s event listener handling that can allow remote attackers to execute arbitrary ...

CVE-2007-5348

The CVE-2007-5348 entry concerns an IMAGE processing vulnerability in Microsoft GDI+ that could enable remote code execution. The connected KB954593 article MS08-052 describes multiple vulnerabilities in GDI+ across Windows and Office components that could be exploited by viewing a specially craf...

CVE-2010-0244

CVE-2010-0244 : IE6/6 SP1/7/8 memory corruption via uninitialized/deleted objects leading to remote code execution. According to MS MS09-054, the fix is a cumulative IE security update; install the most current IE update(s) to mitigate. The connected KB entry describes the update path and mention...

CVE-2012-2557

Summary of CVE-2012-2557 (CVE-2012-2557): A use-after-free vulnerability in Microsoft Internet Explorer 6–8 can permit remote code execution when a crafted page triggers access to a freed object, commonly associated with cloneNode handling (outerText/ CMarkup context). The issue is described as a...

CVE-2018-0870

CVE-2018-0870 is a remote code execution vulnerability in Internet Explorer 11 caused by improper access to objects in memory (memory corruption). Affected software: Internet Explorer 11. Impact is described as high (combined C/H/I/A). Mitigation is through Windows security updates that include I...

CVE-2009-2528

CVE-2009-2528 is a memory corruption vulnerability in GDI+ used by Microsoft Office XP/2000 when parsing Office Art Property Tables. A crafted Office document can trigger remote code execution. Microsoft Security Bulletin MS09-062 (KB957488) provides patches; apply the MS09-062 updates to remedia...

CVE-2020-1570

CVE-2020-1570 is a remote-code-execution vulnerability in the IE scripting engine that can be triggered by memory corruption while handling objects, allowing an attacker to run arbitrary code in the user’s context and potentially take control of the system. The connected Microsoft patch (KB457168...

CVE-2009-3126

CVE-2009-3126 corresponds to the GDI+ PNG Integer Overflow vulnerability described in MS09-062. The issue arises from an integer overflow in GDI+ when processing PNG images, which could allow remote code execution if a user opens a specially crafted image. The vulnerability affects a wide range o...

CVE-2020-0640

CVE-2020-0640 relates to Internet Explorer memory corruption, caused by improper access to memory objects, enabling remote code execution. Connected documents (e.g., OpenVAS entries referencing CVE-2020-0640 among a set of Windows IE/Kb advisories) indicate a high-severity network-exposed vulnera...

CVE-2012-1526

Summary of CVE-2012-1526 : Microsoft Internet Explorer 6 and 7 are affected by a memory handling vulnerability that can allow remote code execution when an attacker accesses an uninitialized or deleted object in memory. The issue, known as Layout Memory Corruption, is exploited via memory object ...

CVE-2013-0019

CVE-2013-0019 is a Use-After-Free vulnerability in Microsoft Internet Explorer 7–10 (Internet Explorer ComWindowProxy UAF) that enables remote code execution when a crafted page accesses a deleted object. The vuln affects IE7–IE10 across Windows client/server lines referenced in the sources, with...

CVE-2012-0012

CVE-2012-0012 corresponds to a vulnerability in Microsoft Internet Explorer 9 where improper handling of string object creation/init could allow a remote attacker to read arbitrary process memory via a crafted webpage (Null Byte Information Disclosure). Connected Microsoft advisories confirm this...

CVE-2012-2548

CVE-2012-2548 corresponds to a use-after-free vulnerability in Microsoft Internet Explorer 9 (Layout Use After Free). Connected advisories confirm the flaw affects Internet Explorer, involving use-after-free of layout-related objects (e.g., CCaret/CTreeNode pathways) and enabling remote code exec...

CVE-2020-1215

CVE-2020-1215 is a remote code execution vulnerability in the VBScript Engine caused by how memory objects are handled. The CNVD-2021-24006 entry states this flaw exists in Microsoft Internet Explorer (IE) VBScript Engine for IE versions 9 and 11, enabling an attacker to execute arbitrary code in...

CVE-2010-0248

CVE-2010-0248 affects Microsoft Internet Explorer 6, 6 SP1, 7, and 8, where improper handling of certain memory objects enables remote code execution via an uninitialized or deleted object, leading to memory corruption. The connected data confirms in-the-wild references and public advisories poin...

CVE-2013-0015

Microsoft Internet Explorer 6–9 suffer from a vulnerability in automatic Shift JIS encoding selection, enabling remote attackers to read content from a different domain/zone via a crafted site that triggers cross-domain scrolling events (Shift JIS Character Encoding Vulnerability). This issue cau...

CVE-2020-1567

CVE-2020-1567 is a remote code execution vulnerability in the MSHTML engine where input is improperly validated, allowing an attacker to execute arbitrary code in the context of the current user. If the current user has administrative rights, the attacker could take control of the system, install...

CVE-2014-0278

Technical details about CVE-2014-0278 are not provided in the supplied documents; only general statements about Internet Explorer memory corruption are present. Monitor for updates in official advisories.

CVE-2002-0832

CVE-2002-0832 affects Internet Explorer 5, 5.6, and 6 . The issue allows remote attackers to bypass cookie privacy settings and persist data across browser sessions via the userData (storeuserData) feature. The connected sources confirm the affected products and the underling behavior but do not ...

CVE-2010-0255

Vulnerability CVE-2010-0255 affects Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8, where IE can render non-HTML local files as HTML documents via dynamic OBJECT tag usage, enabling reading of local files (e.g., index.dat) and bypassing access restrictions. Root cause: IE fails to neutr...

CVE-2012-0011

CVE-2012-0011 relates to Microsoft Internet Explorer 7–9 via MSHTML: a use-after-free in handling of HTML time (t:MEDIA) elements leads to a freed CDispNode reference, enabling remote code execution. ZDI notes IE9 involvement; MS12-010 (2647516) is the official patch. Exploitation context require...

CVE-2012-0155

CVE-2012-0155 affects Microsoft Internet Explorer 9 via a VML handling bug that can allow remote code execution when a deleted object is accessed. The vulnerability is rated CVSS v2 base 9.3 (HIGH) with network exploitability and no user interaction. Affected product: Internet Explorer 9; vulnera...

CVE-2012-1879

CVE-2012-1879 affects Microsoft Internet Explorer 6–9. The issue arises from improper handling of objects in memory, allowing remote code execution when an attacker accesses an undefined memory location via insertAdjacentText. Public sources describe this as a remote code execution vulnerability ...

CVE-2012-1529

CVE-2012-1529 is a use-after-free vulnerability in Microsoft Internet Explorer 8 and 9 triggered by a crafted web site via the OnMove event. The underlying issue is use-after-free when an object access occurs after it was deleted or not properly initialized, leading to memory corruption and remot...

CVE-2013-3111

CVE-2013-3111 affects Microsoft Internet Explorer 8–10 and involves a use-after-free in IEFRAME (CSelectionInteractButtonBehavior::_UpdateButtonLocation) triggered by a crafted webpage, leading to remote code execution or memory corruption. The vulnerability is documented alongside CVE-2013-3123;...

CVE-2014-0279

CVE-2014-0279 affects Microsoft Internet Explorer 8 (and IE6–IE11 per Microsoft guidance) via memory corruption triggered by a crafted web site. The vulnerability is described as a memory corruption/overflow issue that enables remote code execution or a denial of service. Public details in connec...

CVE-2012-1880

CVE-2012-1880 corresponds to remote code execution in Microsoft Internet Explorer 6–9 due to improper handling of objects in memory when accessing a deleted object (insertRow). Documents confirm the root cause as memory corruption enabling code execution, with high severity (base score 9.3). Affe...

CVE-2013-3885

CVE-2013-3885 affects Microsoft Internet Explorer 10 and is described as a memory corruption vulnerability that enables remote code execution or a denial of service when a user visits a crafted web site. It is part of a family of IE10 memory-corruption CVEs (CVE-2013-3872, -3873, -3882, -3885) wi...

CVE-2013-0091

CVE-2013-0091 corresponds to a use-after-free vulnerability in Microsoft Internet Explorer 8 (CElement) that allows remote code execution via a crafted web page, as described across multiple sources (IE use-after-free, MS13-021 patch 2809289). Impact is remote code execution with the attacker pot...

CVE-2013-3146

Microsoft Internet Explorer 10 contains memory corruption vulnerabilities that can be exploited remotely by visiting a crafted website, potentially allowing arbitrary code execution or causing a denial of service. This CVE (CVE-2013-3146) is associated with the IE10 memory-corruption class, disti...

CVE-2019-0768

CVE-2019-0768 is an Internet Explorer security feature bypass affecting VBScript execution policy. The vulnerability description notes VBScript is not properly restricted under certain conditions, enabling bypass of the intended security controls. Connected sources show PoCs/exploits associating ...

CVE-2012-1523

CVE-2012-1523 affects Microsoft Internet Explorer 6–8. Root cause: an error in memory handling when accessing a deleted object, leading to remote code execution. Impact: attacker could execute arbitrary code in the user’s security context (no user interaction needed; network vector). Remediation:...

CVE-2013-0088

CVE-2013-0088 is a use-after-free vulnerability in Microsoft Internet Explorer 6–10 that could allow remote code execution when a user visits a crafted page triggering access to a freed object. Connected sources confirm the vulnerable software range (IE6–IE10) and describe a memory-access flaw th...

CVE-2013-3120

The CVE-2013-3120 entry concerns Microsoft Internet Explorer 10, specifically a memory corruption flaw in the MSHTML component triggered by a crafted web page. Connected sources indicate this issue has been exploited (see Exploit-DB reference via CIRCL sighting) and is discussed under the MS13-04...

CVE-2013-3912

CVE-2013-3912 affects Microsoft Internet Explorer 8–11 and describes a memory corruption vulnerability triggered by a crafted web site, enabling remote code execution or a denial of service. The vulnerability is distinct from CVE-2013-3916, which covers a separate IE memory corruption issue with ...

CVE-2017-0064

CVE-2017-0064 is a security feature bypass in Microsoft Internet Explorer that allows bypassing Mixed Content warnings and loading insecure HTTP content from HTTPS. Several connected sources confirm Internet Explorer as the affected component and describe the bypass of mixed-content warnings (Int...

CVE-2012-2523

The CVE-2012-2523 issue affects Internet Explorer 8/9 on 64-bit Windows, specifically JScript 5.8 and VBScript 5.8. The root cause is an integer overflow due to an incorrect size calculation during object copying, enabling remote code execution as described in MS12-056 (2706045). Public reference...

CVE-2013-3882

Microsoft Internet Explorer 10 contains a memory corruption vulnerability (CVE-2013-3882) that can be exploited by visiting a crafted web site to execute arbitrary code or cause a denial of service. The vulnerability is addressed in Microsoft’s MS13-080 advisory (runtimeStyle/memory handling). Ot...

CVE-2019-0884

Technical details for CVE-2019-0884 are not publicly available in the provided documents; no affected product/version or exploit guidance are specified. Monitor for updates from official advisories.

CVE-2012-1874

CVE-2012-1874 concerns Microsoft Internet Explorer 8 and 9. A use-after-free vulnerability in the IE Developer Toolbar leads to remote code execution when accessing a freed console object, due to incorrect handling of object lifetimes in memory. Public details from security analyses describe a he...

CVE-2013-1297

Summary of CVE-2013-1297 details (from connected docs): Microsoft Internet Explorer versions 6–8 contain a data-access restriction flaw in VBScript that allows remote attackers to perform cross-domain reading of JSON files from a crafted site, described as the JSON Array Information Disclosure Vu...

CVE-2013-3202

CVE-2013-3202 affects Microsoft Internet Explorer 10. The vulnerability is a memory corruption issue that allows remote code execution when a user visits a crafted website. Connected advisories confirm IE memory-corruption vectors and reference MS13-069 as the cumulative security update for Inter...

CVE-2014-0272

CVE-2014-0272 affects Microsoft Internet Explorer (IE) 6–11 (descriptions vary slightly across sources but consistently cite IE memory-corruption vulnerabilities). The issue allows remote attackers to execute arbitrary code or cause a denial of service by visiting a crafted web site, via memory c...

CVE-2010-3328

CVE-2010-3328 is an Uninitialized Memory Corruption vulnerability in Internet Explorer (mshtml.dll) affecting IE6–IE8. The root cause is memory corruption when IE accesses an object that has not been initialized or has been deleted, enabling remote code execution with the caller’s privileges if a...

CVE-2013-3114

CVE-2013-3114 concerns Microsoft Internet Explorer 9 and 10. According to the records, it allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, attributed to memory corruption. The vulnerability is identified as the same family as CVE-2013-3119 but...

CVE-2012-2521

The CVE-2012-2521 issue affects Microsoft Internet Explorer versions 6 through 9, caused by improper handling of in-memory objects which allows an attacker to trigger an out-of-bounds situation by accessing a deleted object, enabling remote code execution. The vulnerability is tied to the Asynchr...

CVE-2013-1288

CVE-2013-1288 is a use-after-free vulnerability in Microsoft Internet Explorer 8 (CTreeNode) that enables remote code execution via a crafted webpage. The NVD entry lists a high impact (CVSS v2 base 9.3) with network access, no user interaction, and complete confidentiality/integrity/availability...

CVE-2013-3145

Microsoft Internet Explorer 9 is affected by CVE-2013-3145 (memory corruption) via a crafted web site. It is a separate issue from CVE-2013-3150. The vulnerability is addressed by Microsoft's MS13-055 security bulletin; patching IE9 (and related components) is the recommended remediation. Exploit...