CVE-2017-11913

Technical details for CVE-2017-11913 are not provided in the supplied documents. Monitor for official updates for affected products, impact, and remediation.

CVE-2018-8625

CVE-2018-8625 is an remote-code-execution vulnerability in the Windows VBScript engine, triggered by how VBScript objects are handled in memory. It affects Internet Explorer 9, 10, and 11. Public references in the connected data indicate active exploitation, with a documented exploit listed in Ex...

CVE-2010-0490

CVE-2010-0490 is an Uninitialized Memory Corruption vulnerability in Microsoft Internet Explorer (IE6, IE6 SP1, IE7, IE8) that could allow remote code execution when IE accesses an object that has not been properly initialized or has been deleted. Exploitation involves viewing a specially crafted...

CVE-2013-0022

CVE-2013-0022 is a use-after-free vulnerability in Microsoft Internet Explorer 9 (LSGetTrailInfo) that could allow remote code execution via a crafted web site. Affected product: Internet Explorer 9. Root cause: use-after-free leading to access to a deleted object. Impact: high/critical, per CVSS...

CVE-2015-2494

Affected software: Microsoft Internet Explorer 7–11 and Microsoft Edge. Vulnerability: memory corruption leading to remote code execution or denial of service via a crafted web site. Root cause / details: memory corruption vulnerability in the browser rendering/handling of web content (as describ...

CVE-2015-6146

The provided connected sources confirm a memory corruption vulnerability in Microsoft Internet Explorer versions 7 and 8. The root cause is memory access issues that allow remote attackers to execute arbitrary code or cause a denial of service when visiting a crafted webpage. CNVD-2015-08067 and ...

CVE-2020-0824

Technical details for CVE-2020-0824 are not publicly provided in the connected documents. No vendor/version/exploit information is present here. Monitor for updates from official advisories to reveal affected components, impact, and fixes.

CVE-2020-1092

Technical details for CVE-2020-1092 are not publicly provided in the connected documents. The initial description covers memory corruption in IE, but no affected versions, vectors, or fixes are given here. Monitor for updates.

CVE-2010-0805

CVE-2010-0805 is an actively discussed vulnerability affecting the Internet Explorer Tabular Data Control ActiveX. The issue arises when a long DataURL parameter triggers a memory corruption inside CTDCCtl::SecurityCHeckDataURL, enabling remote code execution. Public material in connected docs co...

CVE-2016-1109

CVE-2016-1109 affects Adobe Flash Player 21.0.0.213 and earlier (as used in IE/Edge). The vulnerability is described as a use-after-free issue in Flash handling, potentially allowing remote code execution via a specially crafted SWF file. Connected advisories confirm this as part of the Flash sec...

CVE-2016-7153

CVE-2016-7153 describes a vulnerability in the HTTP/2 protocol where the TCP congestion window is not considered when determining content length, potentially enabling an attacker to obtain cleartext data by leveraging a web browser configuration that sends third‑party cookies (HEIST). The connect...

CVE-2017-11858

CVE-2017-11858 is related to ChakraCore/Edge memory corruption via the scripting engine, enabling a user-rights gain by manipulating in-memory objects. Affected components include ChakraCore and Microsoft Edge on Windows 10 versions 1703/1709 and Windows Server equivalents, tied to how memory obj...

CVE-2018-0954

CVE-2018-0954 describes a remote code execution vulnerability in the scripting engine’s handling of in-memory objects that affects Microsoft browsers. Affected products include Internet Explorer 9/10/11, Edge, and ChakraCore. Root cause: memory/object handling flaw in the scripting engine leading...

CVE-2019-1056

Technical details about CVE-2019-1056 are not publicly available in the provided Connected documents; no specifics on affected product/version or remediation are given. Monitor for updates.

CVE-2019-1193

CVE-2019-1193 is a remote code execution vulnerability in Microsoft browsers caused by memory corruption when handling objects in memory. Exploitation requires a user to browse a malicious website or open crafted content; an attacker could gain the user’s privileges and potentially take control o...

CVE-2020-0847

Technical details (affected products/versions/root cause/fix) for CVE-2020-0847 are not provided in connected documents; monitor for updates. The initial description confirms a VBScript RCE in the VBScript engine but lacks actionable specifics in the supplied materials.

CVE-2007-1765

CVE-2007-1765 refers to a remote code execution/DoS vulnerability in Microsoft Windows (Windows 2000 SP4 through Vista) via a malformed ANI file that corrupts memory while processing cursors/animated cursors/icons in LoadAniIcon() of USER32.dll. Connected sources identify this as MS07-017 (RIFF/A...

CVE-2016-7284

CVE-2016-7284 concerns Microsoft Internet Explorer 10/11 information disclosure: a crafted website can cause the browser to reveal sensitive information from process memory. Affected products are Internet Explorer 10 and 11; no exploitation details are provided in the documents beyond the general...

CVE-2019-1221

CVE-2019-1221 is a remote code execution in the Internet Explorer scripting engine memory handling, leading to arbitrary code execution when an attacker can cause memory corruption. Affected software includes Internet Explorer 11 and related scripting components (including Chakra/VBScript-based p...

CVE-2004-1166

CVE-2004-1166 describes a CRLF injection vulnerability in Internet Explorer 6.0.2800.1106 and earlier where an ftp:// URL containing a URL-encoded newline ("%0a") before the FTP command can cause the FTP commands to be injected into the session (e.g., via PORT). The connected MS06-042 bulletin do...

CVE-2008-3014

CVE-2008-3014 is the GDI+ WMF Buffer Overrun vulnerability. A buffer overflow in gdiplus.dll (GDI+) allows remote code execution when processing a malformed WMF image, affecting multiple Windows and Office components listed in the description (e.g., Internet Explorer 6 SP1 on various Windows vers...

CVE-2016-1097

CVE-2016-1097 is a use-after-free vulnerability in Adobe Flash Player (affecting 21.0.0.213 and earlier) that, per connected sources, could lead to arbitrary code execution. Affected platforms include Windows, OS X, and Linux before the indicated patched builds (e.g., Linux before 11.2.202.621 an...

CVE-2017-8606

CVE-2017-8606 is described as a remote code execution vulnerability in Microsoft browsers (JavaScript engine) where memory objects mishandled during rendering could allow code execution in the context of the current user. The initial CVE entry lists multiple Windows versions affected. Connected d...

CVE-2018-0955

CVE-2018-0955 is a remote code execution vulnerability in the Internet Explorer scripting engine related to how objects are handled in memory. Affected products: Internet Explorer 9, 10, and 11. Root cause described as memory corruption within the scripting engine. Exploit details are not provide...

CVE-2018-0981

Technical details for CVE-2018-0981 are not provided in the supplied documents. Monitoring for updates is recommended; the connected items do not illuminate affected products, root cause, or remediation in this set.

CVE-2018-8631

CVE-2018-8631 is a remote code execution vulnerability in Microsoft Internet Explorer caused by improper access to objects in memory. Affects Internet Explorer 9, 10, and 11. The issue enables an attacker to execute arbitrary code on a vulnerable system, with attack vector over network and user i...

CVE-2019-1220

Technical details for CVE-2019-1220 are not publicly available in the provided documents. No explicit affected products, versions, impact, or remediation are provided here. Monitor for updates from official sources.

CVE-2000-0465

Affected software: Internet Explorer 4.x and 5.x. Vulnerability: Frame Domain Verification — IE does not properly verify the domain of a frame within a browser window. Root cause/summary: Inadequate domain verification enables a remote attacker to access client files via the frame. Impact: Confid...

CVE-2006-1359

CVE-2006-1359 affects Microsoft Internet Explorer 6/7 Beta 2 and relates to a vulnerability in createTextRange() on checkbox objects, which can lead to remote denial of service and potentially arbitrary code execution via dereferencing an invalid table pointer. Multiple sources tie this to MS06-0...

CVE-2010-1262

CVE-2010-1262 affects Microsoft Internet Explorer 6 SP1/SP2, 7, and 8, allowing remote code execution through memory corruption involving the CStyleSheet object and a free of the root container. The issue was addressed by MS10-035, a cumulative security update for Internet Explorer, which resolve...

CVE-2016-0192

CVE-2016-0192 affects Microsoft Internet Explorer 9–11 and Microsoft Edge. It is a remote code-execution/memory-corruption vulnerability that could allow an attacker to run arbitrary code on a vulnerable system by convincing a user to visit a crafted website. The root cause involves memory handli...

CVE-2016-7241

CVE-2016-7241 concerns memory corruption in Microsoft Internet Explorer 11 and Microsoft Edge triggered by visiting a crafted website, leading to remote code execution or memory corruption-induced denial of service. The issue is attributed to memory corruption in the browser’s handling of certain...

CVE-2017-0049

CVE-2017-0049 affects the VBScript engine in Internet Explorer 11 and is an information-disclosure vulnerability that lets a crafted website obtain sensitive data from process memory. The connected CNVD entry (CNVD-2017-03594) notes a Microsoft Internet Explorer Scripting Engine Information Discl...

CVE-2017-11834

CVE-2017-11834 affects Internet Explorer in Windows 7/8.x/10 and corresponding Server SKUs. The root cause is how the scripting engine handles objects in memory, leading to information disclosure that could help an attacker further compromise the system. The vulnerability is listed with CVE-2017-...

CVE-2017-8547

CVE-2017-8547 affects Internet Explorer across Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1/RT 8.1, and Windows Server 2012/2012 R2. The vulnerability stems from Internet Explorer improperly accessing objects in memory, allowing an attacker to execute arbitrary code in the context of th...

CVE-2018-0772

Technical details for CVE-2018-0772 are not provided in the supplied Connected documents. Public details (affected products, exploit specifics, impact, or fixes) are not available here. Monitor for updates and new disclosures.

CVE-2019-0940

CVE-2019-0940 is a remote code‑execution vulnerability in Microsoft browsers caused by improper memory handling (memory buffer/ boundary validation) in Edge/Internet Explorer. The issue enables an attacker to execute arbitrary code by sending crafted content over the network, with user interactio...

CVE-2016-3204

CVE-2016-3204 involves a memory corruption vulnerability in Microsoft JScript 5.8/9 and VBScript 5.7/5.8 engines used by Internet Explorer 9–11 and related components. The flaw could allow remote code execution or a denial-of-service condition when a user visits a crafted website. Public details ...

CVE-2016-3375

The CVE-2016-3375 entry describes a memory-corruption vulnerability in the Microsoft OLE Automation mechanism and VBScript Scripting Engine used by Internet Explorer. A remote attacker can craft a website to trigger memory corruption, potentially executing arbitrary code in the context of the log...

CVE-2017-11906

Technical details about CVE-2017-11906 (affected products, root cause, impact, remediation) are not publicly provided in the supplied documents. Monitor for vendor advisories and updates.

CVE-2020-1012

CVE-2020-1012 is a Windows vulnerability tied to the WinINet API (listed in KB articles) with Elevation of Privilege impact. Publicly available connected docs confirm the affected component as WinINet API and indicate a security update is included in September 2020 rollups (e.g., KB4577015 and re...

CVE-2016-1102

CVE-2016-1102 is described as an unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Flash libraries in Internet Explorer 10/11 and Microsoft Edge, with unknown impact and attack vectors. It is noted as a different vulnerability than other CVEs listed in MS16-06...

CVE-2016-3211

CVE-2016-3211 and related entries describe memory corruption vulnerabilities in Microsoft Internet Explorer 9–11 that allow remote code execution or denial of service via crafted web sites. Connected sources tie CVE-2016-0199 (IE9–11) and CVE-2016-0200 to an IE11 garbage collector/attribute type ...

CVE-2020-0706

Technical details for CVE-2020-0706 are not publicly provided in the connected documents; monitor for updates and rely on the NVD description for a general overview.

CVE-2004-1050

CVE-2004-1050 affects Internet Explorer 6. A heap-based buffer overflow occurs when parsing long NAME or SRC attributes in IFRAME/FRAME/EMBED elements, allowing remote code execution. Exploitation typically involves loading a crafted page; CVSS notes high risk (network exploit, no user interactio...

CVE-2009-2503

CVE-2009-2503 is a GDI+ memory corruption vulnerability in Microsoft components that can be triggered by a crafted TIFF image file, enabling remote code execution. The weakness resides in how GDI+ allocates memory when processing TIFFs, affecting a wide range of Windows and Office products listed...

CVE-2012-1875

CVE-2012-1875 affects Internet Explorer 8. The issue is a memory corruption vulnerability in IE8 when handling objects with the same ID property, allowing a remote attacker to execute arbitrary code by accessing a deleted object. Public exploit activity exists (e.g., Metasploit module for MS12-03...

CVE-2014-4140

CVE-2014-4140 affects Microsoft Internet Explorer 8–11 and is a security-bypass via ASLR circumvention when visiting a crafted web site. The root cause is an ASLR protection bypass in IE, enabling remote attackers to bypass memory protections. Public exploitation exists, and multiple connected so...

CVE-2016-1096

Technical details about CVE-2016-1096 are not provided in the supplied documents; current records only note it as unspecified with unknown impact; monitor for updates.

CVE-2018-8145

The CVE-2018-8145 entry describes an information-disclosure vulnerability in the Chakra Scripting Engine memory handling, affecting ChakraCore, Internet Explorer 11, Microsoft Edge, and IE10. The root cause is improper disclosure of memory contents, enabling an attacker to obtain sensitive data t...