CVE-2012-2523

The CVE-2012-2523 issue affects Internet Explorer 8/9 on 64-bit Windows, specifically JScript 5.8 and VBScript 5.8. The root cause is an integer overflow due to an incorrect size calculation during object copying, enabling remote code execution as described in MS12-056 (2706045). Public reference...

CVE-2013-1288

CVE-2013-1288 is a use-after-free vulnerability in Microsoft Internet Explorer 8 (CTreeNode) that enables remote code execution via a crafted webpage. The NVD entry lists a high impact (CVSS v2 base 9.3) with network access, no user interaction, and complete confidentiality/integrity/availability...

CVE-2013-3145

Microsoft Internet Explorer 9 is affected by CVE-2013-3145 (memory corruption) via a crafted web site. It is a separate issue from CVE-2013-3150. The vulnerability is addressed by Microsoft's MS13-055 security bulletin; patching IE9 (and related components) is the recommended remediation. Exploit...

CVE-2013-3152

Microsoft Internet Explorer 10 contains a memory‑corruption vulnerability, exploitable via a crafted web site that could allow remote code execution or memory corruption leading to a denial of service. This CVE‑2013‑3152 is distinct from CVE‑2013‑3146. Public details reference Microsoft Security ...

CVE-2016-3325

CVE-2016-3325 affects Microsoft Internet Explorer 11 and Microsoft Edge. A memory handling flaw in IE/Edge enables information disclosure when visiting a crafted site; attack vector is network, with user interaction required (per CVSS3). Exploitation has been observed (CVE-2016-3325 appears in ex...

CVE-2013-0021

CVE-2013-0021 is a use-after-free vulnerability in Microsoft Internet Explorer (IE) versions 6 through 10. The flaw arises when IE accesses an in‑memory object after it has been freed, enabling a remote attacker to execute arbitrary code on the affected system when a user visits a crafted webpage...

CVE-2013-1297

Summary of CVE-2013-1297 details (from connected docs): Microsoft Internet Explorer versions 6–8 contain a data-access restriction flaw in VBScript that allows remote attackers to perform cross-domain reading of JSON files from a crafted site, described as the JSON Array Information Disclosure Vu...

CVE-2013-1310

CVE-2013-1310 describes a use-after-free vulnerability in Internet Explorer 6 and 7 where remote code execution could be triggered by visiting a crafted webpage that accesses a deleted object. The root cause is a memory-management flaw that can lead to arbitrary code execution in the context of t...

CVE-2013-3114

CVE-2013-3114 concerns Microsoft Internet Explorer 9 and 10. According to the records, it allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, attributed to memory corruption. The vulnerability is identified as the same family as CVE-2013-3119 but...

CVE-2013-3124

CVE-2013-3124 describes a memory corruption vulnerability in Microsoft Internet Explorer 9 that can allow remote code execution or a denial of service via a crafted webpage. The affected component is Internet Explorer 9; root cause is memory corruption, with the public description noting it as a ...

CVE-2013-3908

Technical details about CVE-2013-3908 are not publicly disclosed in the provided documents. Monitor for updates from connected sources for affected products, root cause, impact, and available fixes.

CVE-2013-3911

CVE-2013-3911 affects Microsoft Internet Explorer 9 and 10 (IE9/IE10). The connected ZDI advisory confirms a use-after-free in CEditAdorner handling that can be exploited to execute arbitrary code on vulnerable IE installations. The exploitation requires the target to visit a malicious page or ot...

CVE-2005-1988

The CVE-2005-1988 entry describes a remote code execution vulnerability in Microsoft Internet Explorer (versions 5.0, 5.5, and 6.0) caused by memory corruption in the JPEG image rendering component. A crafted JPEG image (delivered via a malicious webpage or HTML email) could trigger a buffer over...

CVE-2012-0170

Microsoft Internet Explorer (notably IE6/IE7) contains a memory handling vulnerability related to OnReadyStateChange where accessing a deleted object can lead to remote code execution. The CVE-2012-0170 entry is associated with multiple advisories; Microsoft issued MS12-023 (Cumulative Security U...

CVE-2014-0289

Microsoft Internet Explorer 11 is affected by CVE-2014-0289, described as memory corruption that can allow remote code execution or a memory-denial via a crafted web site. Exploit activity is indicated in public sources, and multiple advisories reference MS14-010 as the mitigating update. Connect...

CVE-2012-1881

CVE-2012-1881 describes a remote code execution vulnerability in Microsoft Internet Explorer 8 and 9 caused by improper handling of memory objects, specifically when accessing a deleted object (OnRowsInserted event). The vulnerability allows code execution with the same privileges as the logged-i...

CVE-2013-3193

CVE-2013-3193 affects Microsoft Internet Explorer 9 and 10 . It enables remote attackers to execute arbitrary code or cause a denial of service via memory corruption triggered by a crafted webpage. This is a memory-corruption vulnerability distinct from CVE-2013-3187 and CVE-2013-3191. Public det...

CVE-2018-1025

CVE-2018-1025 is an information-disclosure vulnerability in affected Microsoft browsers, specifically Internet Explorer 11 and Microsoft Edge, caused by improper handling of objects in memory. The NVD entry states the issue leads to leakage of information but does not provide exploit details, aff...

CVE-2012-0172

CVE-2012-0172 affects Microsoft Internet Explorer 6–8. The issue is a use-after-free in the vgx.dll path while processing certain VML behaviors, enabling remote code execution when a user visits a malicious page. Affected products include IE6/7/8 on multiple Windows versions; the root cause is me...

CVE-2012-1873

Microsoft Internet Explorer 7–9 are affected by CVE-2012-1873 (Null Byte Information Disclosure). The issue stems from improper creation and initialization of string data, enabling remote attackers to extract sensitive information from the browser process memory via a crafted HTML document. The v...

CVE-2013-0089

CVE-2013-0089 is a use-after-free vulnerability in Microsoft IE versions 6–10 (CMarkupBehaviorContext) that could allow remote code execution when a user visits a crafted page. Root cause: accessing a deleted object in memory. Impact: remote code execution with the user’s rights (no user interact...

CVE-2013-3153

CVE-2013-3153 is a memory‑corruption vulnerability in Microsoft Internet Explorer 6–10 (via a crafted web site) that can enable remote code execution or a denial of service. It is described as a separate issue from CVE-2013-3148. Affected software is Internet Explorer on supported Windows version...

CVE-2013-3916

CVE-2013-3916 affects Microsoft Internet Explorer 8–11, where a crafted web site can cause memory corruption leading to remote code execution or denial of service. Documents consistently describe memory corruption as the underlying issue in IE’s processing of web content, with the vulnerability c...

CVE-2013-3917

CVE-2013-3917 affects Microsoft Internet Explorer 6–11. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) by visiting a crafted web site, referred to as the Internet Explorer Memory Corruption Vulnerability. It is a distinct issue...

CVE-2014-0285

CVE-2014-0285 : Microsoft Internet Explorer 6–11 is affected by a memory corruption vulnerability that allows remote code execution or a denial of service when a user visits a crafted web site. The issue is described as part of a family of IE memory corruption vulnerabilities (distinct from CVE-2...

CVE-2013-0087

CVE-2013-0087 is a use-after-free vulnerability in Microsoft Internet Explorer 6–10 caused by a fault in the MSHTML code path (CElement::EnsureRecalcNotify) when handling onResize/onMove events. A crafted web page can trigger access to a freed object, enabling remote code execution. The vulnerabi...

CVE-2013-3205

CVE-2013-3205 is a vulnerability in Microsoft Internet Explorer 6–8 that allows remote code execution or memory corruption when processing a crafted web page. The connected sources describe a use-after-free flaw in IE’s caret handling (CCaret) within mshtml, where freeing CCaret via document.writ...

CVE-2014-0302

CVE-2014-0302 affects Microsoft Internet Explorer 6–8. The connected sources confirm a memory-corruption vulnerability exploitable via a crafted web site, enabling remote code execution or a denial of service (memory corruption) under the affected IE versions. The issue is distinct from CVE-2014-...

CVE-2007-0946

CVE-2007-0946 describes a memory corruption vulnerability in Microsoft Internet Explorer 7 on Windows XP SP2, Windows Server 2003 SP1/SP2, and Windows Vista, triggered by crafted HTML objects. The underlying issue is the improper handling of HTML objects, leading to memory corruption and potentia...

CVE-2009-0075

The CVE-2009-0075 issue affects Microsoft Internet Explorer (IE7/IE8) on Windows platforms as described in the connected advisories and MS09-002 update. The root cause is an uninitialized memory corruption when IE accesses an object that has been deleted, leading to remote code execution via a cr...

CVE-2012-0010

CVE-2012-0010 affects Microsoft Internet Explorer 6–9, where copy-and-paste operations could disclose information from another domain or security zone via a crafted webpage (information disclosure). Multiple connected sources confirm a related MS12-010 update (2647516) addressing IE vulnerabiliti...

CVE-2012-0171

CVE-2012-0171 affects Microsoft Internet Explorer 6–9. The vulnerability arises from how IE handles in-memory objects; accessing a deleted object can lead to memory corruption and remote code execution. Connected sources confirm this is the well-known “SelectAll Remote Code Execution Vulnerabilit...

CVE-2013-3191

Microsoft Internet Explorer 9 and 10 contain memory corruption vulnerabilities (CVE-2013-3191, CVE-2013-3193, CVE-2013-3187) that allow remote code execution or a denial of service via a crafted web site. Root cause described as memory corruption when accessing memory objects. Affected: IE 9–10. ...

CVE-2013-3192

CVE-2013-3192 (IE EUC-JP XSS) affects Microsoft Internet Explorer 6–10. The vulnerability arises from how IE handles EUC-JP character encoding, allowing remote attackers to execute arbitrary script or HTML via crafted input. Public references describe a universal cross-site scripting issue with E...

CVE-2013-3845

CVE-2013-3845 refers to multiple memory-corruption vulnerabilities in Microsoft Internet Explorer 8 and 9. The description and connected documents confirm remote code execution and potential memory corruption via a crafted web site, with the issue affecting IE8/IE9 through various components (not...

CVE-2017-11890

Technical details for CVE-2017-11890 are not publicly available in the provided Connected documents. The Initial Description notes Windows IE scripting engine memory corruption, but no vendor/product/version specifics or remediation are included here. Monitor for updates from official advisories ...

CVE-2020-0967

Technical details for CVE-2020-0967 are not publicly provided in the connected documents. The initial entry notes a VBScript RCE in memory handling but no product/version specifics or fixes are included here. Monitor for updates.

CVE-2013-3116

CVE-2013-3116 affects Microsoft Internet Explorer 7–9. The vulnerability enables remote attackers to execute arbitrary code or cause a denial of service (memory corruption) by convincing a user to view a crafted web site. The memory-corruption issue occurs in IE’s handling of certain content, as ...

CVE-2013-3150

Microsoft Internet Explorer 9 is affected by CVE-2013-3150, describing a memory corruption vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. This entry is explicitly linked to Microsoft’s MS13-055 advisory; CVE-2013-3150 is n...

CVE-2013-5047

CVE-2013-5047 affects Microsoft Internet Explorer (IE) versions 6–11. The description and connected records consistently describe memory corruption vulnerabilities in IE that could allow remote code execution or a denial of service via a crafted web site. The CVE entry is linked to MS13-097 (Cumu...

CVE-2014-0290

Microsoft Internet Explorer 11 is affected by CVE-2014-0290, a memory corruption vulnerability that an attacker can trigger by visiting a crafted web site, enabling remote code execution or memory-related denial of service. Public exploits exist for this vulnerability per related sources, and rem...

CVE-2020-0895

CVE-2020-0895 is the Windows VBScript Engine RCE vulnerability. Connected CNVD-2020-31543 describes a VBScript Engine buffer overflow in IE (affecting IE9/11) related to memory handling. The provided documents confirm a remote code execution risk via VBScript objects in memory but do not specify ...

CVE-2012-1524

CVE-2012-1524 refers to a remote-code-execution flaw in Microsoft Internet Explorer 9 where memory objects are not handled safely, enabling arbitrary code execution when a deleted object is accessed. NVD lists a 9.3 CVSS base score (vector AV:N/AC:M/Au:N/C:C/I:C/A:C); exploitation would be networ...

CVE-2012-2522

CVE-2012-2522 affects Microsoft Internet Explorer 6–9. The vulnerability arises from improper handling of memory objects, enabling a remote attacker to execute arbitrary code by accessing a corrupted virtual function table after it has been deleted (Virtual Function Table Corruption Remote Code E...

CVE-2013-3122

Microsoft Internet Explorer 9 is affected by CVE-2013-3122. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service through a crafted web site, described as a memory corruption issue (distinct from CVE-2013-3117 and CVE-2013-3124). The initial description ...

CVE-2020-1219

CVE-2020-1219 affects Microsoft browsers (IE11/Edge) where memory objects are accessed in memory, causing memory corruption. Root cause: improper handling of memory in the browser’s object access path, enabling arbitrary code execution. Impact: remote code execution with the current user’s rights...

CVE-2012-1877

CVE-2012-1877 is a remote code execution vulnerability in Microsoft Internet Explorer 6–9 caused by improper handling of objects in memory, allowing an attacker to run arbitrary code by accessing a deleted object. Multiple connected sources (including the NVD entry for CVE-2012-1877 and OpenVAS/N...

CVE-2012-1878

CVE-2012-1878 affects Microsoft Internet Explorer versions 6–9. The vulnerability stems from improper handling of memory objects, allowing remote code execution when an attacker accesses a deleted object (OnBeforeDeactivate event). The issue is severe: base CVSS 9.3 (NETWORK, HIGH) with complete ...

CVE-2013-0092

CVE-2013-0092 is a use-after-free vulnerability in Microsoft Internet Explorer 6–10 that enables remote code execution when a user visits a crafted page exploiting an access to a deleted object (GetMarkupPtr use-after-free). The issue is documented across multiple sources (IE GetMarkupPtr Use Aft...

CVE-2013-3121

Microsoft Internet Explorer 6–10 is affected by a memory corruption vulnerability that allows remote code execution or a denial of service when visiting a crafted website. The issue is documented as CVE-2013-3112/3113/3121/3139/3142 family, with MS13-047 providing the patch (Cumulative Security U...