1635 matches found
CVE-2013-3125
Microsoft Internet Explorer 10 is affected by CVE-2013-3125 (Memory corruption) via a crafted web site, distinct from CVE-2013-3118 and CVE-2013-3120. The vulnerability concerns MSHTML/IE10 memory corruption that could allow remote code execution or DoS. Related exploits/documentation exist for o...
CVE-2013-3204
CVE-2013-3204 affects Microsoft Internet Explorer 7–10. The vulnerability enables remote code execution or memory corruption via a crafted webpage. The root cause is memory corruption in IE’s handling of web content, with documents listing MS13-069 as the patch (KB 2870699) for Internet Explorer ...
CVE-2013-5049
CVE-2013-5049 is an IE vulnerability affecting Microsoft Internet Explorer 6–9. Public docs describe a memory-corruption flaw that can lead to remote code execution (the exploit context involves visiting a crafted site; user interaction may be required per ZDI). The issue is addressed by the MS13...
CVE-2020-0830
Technical details about CVE-2020-0830 are not provided in the connected documents. Public information for this CVE is not present here. Monitor for updates from official advisories and trusted sources.
CVE-2013-3199
CVE-2013-3199 is a memory-corruption vulnerability in Microsoft Internet Explorer (IE6–IE10) that can enable remote code execution or memory-corruption-based denial-of-service when a user visits a crafted page. Connected sources detail the underlying use-after-free/memory-corruption issue affecti...
CVE-2014-0269
CVE-2014-0269 is a memory corruption vulnerability in Microsoft Internet Explorer (publicly documented as affecting IE 6–11 in the connected data). It enables remote code execution or memory corruption via a specially crafted web site. The root cause is memory object handling errors, allowing an ...
CVE-2013-0023
The CVE-2013-0023 issue concerns Microsoft Internet Explorer versions 9 and 10, where a Use-After-Free in the CDispNode/SVG handling can lead to remote code execution when visiting a crafted web page. The underlying cause is a memory-management flaw (use-after-free) that allows an attacker to tri...
CVE-2013-3139
CVE-2013-3139 affects Microsoft Internet Explorer 6–10. The vulnerability is a memory corruption flaw exploitable via a crafted website, enabling remote code execution or a denial of service. Related references confirm variants across IE6–IE10; connected sources note Microsoft patch MS13-047 (Cum...
CVE-2013-3164
CVE-2013-3164 : Vulnerability in Internet Explorer 8 where a use-after-free in CAnchorElement during memory handling can be abused by a crafted webpage to achieve remote code execution or memory corruption. Documented as MS13-055 (Cumulative Security Update for Internet Explorer, 2846071). Affect...
CVE-2013-3208
Mode C: The CVE-2013-3208 entry concerns Microsoft Internet Explorer 8–10 (Windows desktop) where visiting a crafted webpage can trigger a memory corruption vulnerability, allowing remote code execution or a denial of service. The vulnerability affects IE’s handling of web content, with exploitat...
CVE-2015-1662
Microsoft Internet Explorer 11 has a memory corruption vulnerability exploitable via a crafted web site, enabling remote code execution or DoS. This is one of several IE memory corruption vulnerabilities cited in CVE-2015-1662 family (distinct from CVE-2015-1659 and CVE-2015-1665). The affected p...
CVE-2017-8750
CVE-2017-8750 is a memory corruption vulnerability in Microsoft Browsers (Internet Explorer and Edge) that allows remote code execution in the context of the current user when objects in memory are accessed improperly. Affected software includes Internet Explorer on Windows 7 SP1, Windows Server ...
CVE-2006-3730
CVE-2006-3730 describes an integer overflow in the WebViewFolderIcon ActiveX control (webvw.dll) setSlice method, exploitable by remote attackers to crash or execute arbitrary code in Internet Explorer 6 on Windows XP SP2. Public details show MS06-057 as the fix; mitigations include applying the ...
CVE-2009-2501
CVE-2009-2501 describes a heap-based buffer overflow in Microsoft GDI+ when processing PNG images, enabling remote code execution via crafted PNGs. Affected software/contexts include Internet Explorer 6 SP1 on Windows XP (SP2/SP3) and various Microsoft Office components and viewers that rely on G...
CVE-2013-3123
CVE-2013-3123 affects Microsoft Internet Explorer 8–10 and is described as a memory corruption vulnerability triggered by a crafted web page. It is distinct from CVE-2013-3111. Public references in NVD and related sources confirm IE8–10 memory-corroption issue and point to MS13-047 as the remedia...
CVE-2013-3142
CVE-2013-3142 affects Microsoft Internet Explorer 6–10. It describes a memory corruption vulnerability that allows remote code execution or a denial of service via a crafted web site, distinct from CVE-2013-3112/3113/3121/3139. Public references for this family point to IE memory corruption issue...
CVE-2013-3189
CVE-2013-3189 affects Microsoft Internet Explorer 8 and 9. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, described as memory corruption in IE, distinct from CVE-2013-3188. Connected sources corroborate impact as remote cod...
CVE-2013-3194
CVE-2013-3194 affects Microsoft Internet Explorer 9, describing a remote code execution/memory corruption vulnerability when a user views a crafted web page. The root cause is memory corruption in IE’s rendering components (MSHTML/related HTML DLLs) used by IE9, enabling arbitrary code execution ...
CVE-2020-0966
CVE-2020-0966 is a VBScript engine remote code execution vulnerability. Connected CNVD entries describe memory handling flaws in the VBScript engine used by Internet Explorer, affecting IE versions 9 and 11. An attacker could exploit memory object handling to execute arbitrary code in the context...
CVE-2013-3147
Microsoft Internet Explorer 6–9 is affected by CVE-2013-3147, a memory-corruption vulnerability triggered by visiting a crafted web site. The issue can allow remote code execution or a denial of service and is tied to multiple memory-corruption vectors in IE’s handling of content. Remediation is ...
CVE-2013-3148
CVE-2013-3148 refers to a memory corruption vulnerability in Microsoft Internet Explorer 6–10 that can be exploited via a crafted web site to remotely execute arbitrary code or cause a denial of service. The issue affects IE versions 6–10 and is described as the "Internet Explorer Memory Corrupti...
CVE-2017-11886
Technical details for CVE-2017-11886 are not present in the provided documents; no affected products, impact, or remediation are specified here. Monitor for updates.
CVE-2009-1141
CVE-2009-1141 affects Microsoft Internet Explorer 6 on Windows XP SP2/SP3 and Windows Server 2003 SP2. The issue is a memory corruption in IE’s DHTML handling, triggered by specific DHTML function calls related to the TR element and table cell manipulation, with memory corruption upon window dest...
CVE-2013-3110
The CVE-2013-3110 entry concerns memory corruption in Microsoft Internet Explorer 8 and 9 via a crafted web site, enabling remote code execution or DoS. Connected records confirm the same class of vulnerability affects IE8/IE9 and document CVE-2013-3141 as a separate entry for a related memory co...
CVE-2013-3207
CVE-2013-3207 affects Microsoft Internet Explorer 9 and 10. The vulnerability is a memory corruption issue that could allow remote code execution via a crafted web site. Microsoft released MS13-069 (Cumulative Security Update for Internet Explorer, MS13-069; patch ID 2870699) to fix it. Affected ...
CVE-2016-7152
CVE-2016-7152 is described in IBM Security Bulletin as a HEIST-related vulnerability affecting the Firefox component of the IBM Synthetic Playback agent used with IBM Application Performance Management (APM) 8.1.3 and IBM Cloud Application Performance Management. The root cause is that the HTTPS ...
CVE-2019-0911
CVE-2019-0911 corresponds to a remote code execution issue stemming from how the scripting engine handles memory objects in Microsoft browsers. Connected CNVD data describes a memory object handling buffer/overrun vulnerability in Microsoft Internet Explorer (IE9–11) that could allow memory corru...
CVE-2019-0920
CVE-2019-0920 is a remote code execution vulnerability in the way a Microsoft browser’s scripting engine handles objects in memory, enabling arbitrary code execution with the attacker’s user rights. The issue can be triggered when a user visits a crafted website or opens content that hosts the br...
CVE-2020-1035
CVE-2020-1035 is a remote code execution vulnerability in the VBScript engine’s handling of in‑memory objects. The description identifies the issue as a VBScript Remote Code Execution Vulnerability affecting the VBScript engine (used by Internet Explorer) with a high impact (CVSS v3.1 base score ...
CVE-2013-3846
CVE-2013-3846 is described as a use-after-free in Microsoft Internet Explorer 9 and 10 that allows remote code execution or memory corruption via a crafted CSpliceTreeEngine::InsertSplice in an HTML document. The initial record states this is a memory corruption vulnerability distinct from CVE-20...
CVE-2017-11843
CVE-2017-11843 affects ChakraCore and Microsoft Edge; described as a memory-corruption vulnerability in the scripting engine that lets an attacker gain the current user’s rights by manipulating in-memory objects. GHSA advisories indicate impact on Windows 10 (versions 1703 and 1709) and Windows S...
CVE-2020-1219
CVE-2020-1219 affects Microsoft browsers (IE11/Edge) where memory objects are accessed in memory, causing memory corruption. Root cause: improper handling of memory in the browser’s object access path, enabling arbitrary code execution. Impact: remote code execution with the current user’s rights...
CVE-2020-1315
CVE-2020-1315 is an information-disclosure vulnerability in Internet Explorer caused by improper handling of objects in memory. The root cause, as documented, is memory handling flaws in IE which can lead to partial disclosure of information. The CVE is publicly listed with a NVD severity of MEDI...
CVE-2020-17053
CVE-2020-17053 is an Internet Explorer memory corruption vulnerability in Windows. Root cause: memory corruption in IE components leading to code execution. Impact (per CVSS): high confidentiality, integrity, and availability; network exploit with user interaction required. Exploitation status is...
CVE-2013-3209
This CVE concerns Microsoft Internet Explorer 9–10 memory corruption that can enable remote code execution or a denial of service when visiting a crafted web site. The affected component is Internet Explorer for Windows (IE9–IE10), with memory corruption as the underlying issue described in CVE-2...
CVE-2013-3115
Summary (based on provided docs): Internet Explorer 7–10 contains memory-corruption vulnerabilities exploitable via crafted web content, identified as CVE-2013-3115 (and related CVE-2013-3162 as a separate issue). OpenVAS entries flag MS13-055 as the corresponding patch/update. The vulnerabilitie...
CVE-2009-0550
CVE-2009-0550 impacts Windows HTTP Services (WinHTTP) and WinINet used by Internet Explorer, on Windows 2000 SP4, XP SP2/SP3, Server 2003, Vista, and Server 2008; the vulnerability allows an attacker-controlled remote web server to capture NTLM credentials and replay them, and to execute arbitrar...
CVE-2016-3267
CVE-2016-3267 affects Microsoft Internet Explorer 9–11 and Microsoft Edge, enabling remote attackers to determine the existence of unspecified files via a crafted web site (information disclosure). Exploitation details are not provided beyond this remote-disclosure behavior. The vulnerability is ...
CVE-2019-0609
CVE-2019-0609 describes a remote-code-execution vulnerability in the way a Microsoft scripting engine handles in-memory objects, impacting Microsoft browsers. Root cause is memory-handling weakness in the scripting engine, with network access required and user interaction needed. The CVSS metrics...
CVE-2019-0639
Technical details such as affected products, vulnerable components, impact, or remedies for CVE-2019-0639 are not publicly provided in the supplied connected documents. Monitor for updates from official advisories.
CVE-2019-0667
CVE-2019-0667 is a remote code execution vulnerability in the Windows VBScript Engine, caused by the way the engine handles objects in memory. The CVE entry identifies the affected component as the VBScript engine in Windows, with exploitation relying on memory object handling to achieve code exe...
CVE-2019-1104
Technical details about CVE-2019-1104 are not provided in the supplied documents. No information on affected products, root cause, impact, or mitigations is available here. Monitor for official disclosures from Microsoft/NVD for updates.
CVE-2020-1062
CVE-2020-1062 is an Internet Explorer remote code execution/memory-corruption vulnerability. Connected docs confirm IE versions affected include IE 9 and IE 11, with root cause described as improper access to memory objects. Public details in CNVD entries reiterate IE RCE for IE9/11, aligning wit...
CVE-2013-0093
CVE-2013-0093 is a Use-After-Free vulnerability in Microsoft Internet Explorer 6–10 that enables remote code execution when a user visits a crafted webpage that triggers access to a deleted object (Internet Explorer onBeforeCopy Use After Free Vulnerability). Connected documents confirm affected ...
CVE-2014-4145
CVE-2014-4145 corresponds to a memory-corruption vulnerability in Microsoft Internet Explorer (IE 6–11), with IE11 specifically affected by a crafted web site that can lead to remote code execution or a denial of service. The root cause is memory corruption triggered by a crafted page, enabling a...
CVE-2017-11791
CVE-2017-11791 is described in the provided documents as an information-disclosure vulnerability affecting the scripting engine in ChakraCore/Internet Explorer. The vulnerability arises from how objects are handled in memory and is reported for Internet Explorer and ChakraCore components on Windo...
CVE-2019-1208
CVE-2019-1208 is a VBScript engine use-after-free vulnerability in Internet Explorer. The CVE describes a UAF in how VBScript handles in-memory objects, enabling remote code execution under the current user when the vulnerability is triggered (e.g., via a crafted web page or ActiveX elements). Co...
CVE-2016-0060
Affected software: Microsoft Internet Explorer 9–11 and Microsoft Edge. The vulnerability is a memory corruption issue triggered by a crafted website, allowing remote code execution or a denial of service. This CVE is part of a family of related Internet Explorer memory corruption vulnerabilities...
CVE-2017-11930
CVE-2017-11930 affects ChakraCore and related Windows components (Internet Explorer). The core issue is a memory-handling flaw in the scripting engine that can lead to arbitrary code execution in the context of the current user. Descriptions in connected advisories frame this as a “Scripting Engi...